last executing test programs: 3m23.769204727s ago: executing program 3 (id=684): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) socket(0xf, 0x3, 0x2) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) open(0x0, 0x14d27e, 0x72) (async) socket(0x1e, 0x1, 0x0) (async) r1 = fanotify_init$auto(0x5, 0x2000000000002) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0x0) (async) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, 0x0) (async) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x7fffffff, 0x0) (async) socket(0x15, 0x5, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd4/sched/write2_next_rq\x00', 0x0, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) (async) shutdown$auto(0x200000003, 0x2) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) (async) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) 3m22.405827474s ago: executing program 3 (id=686): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x29, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x9, 0x2, 0x81, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) mmap$auto(0x9c6, 0x8, 0x8, 0xeb1, r0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket(0x23, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3m16.340409817s ago: executing program 3 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) pread64$auto(r1, 0x0, 0x1ff, 0x5) msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000000c0)={{0x6, 0xee00, 0xee00, 0x8, 0x6, 0x0, 0x5}, &(0x7f0000000040), &(0x7f0000000080)=0xe5, 0x3, 0x9, 0x6, 0x7, 0x7b8aa795, 0x3, 0x917, 0x8, @inferred=0xffffffffffffffff, @raw=0x5}) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x6, 0x240, 0x0, 0x3, r2, 0x0, 0x0, 0x8, 0x1, 0x7fffffffffffffff, 0x7, 0x2, 0x6, 0x2, 0x1, 0x7, 0x7e0}) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04\x01\x04\x00\x00\x00\xf1\xff\x00\xb6', 0x8) r4 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5096cfb9e000000000001000000000000bf72", @ANYRES16=r4, @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r6, 0x40603d07, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xe3, 0x400000000a, 0x200000003}, 0x6f1) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r0, &(0x7f00000015c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f00000024c0)=ANY=[@ANYBLOB="fc120000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fcdbdf2506000000e51202808b4d5baab42940bc6276d72b9868af64db959f3f02438dc795730851304061ee8ee1ead1174d6ff8ba9cacba21a54b7a2ed010240fa8e7df585c2408b79a1f70c2e31a20f8c5117c6679d5f218bff7c0f965fa8a169f074fc7f5fd6142b99bd30e1ed6af33d3e68075b66d4c582d921f02df1cd3b3c2271a6e6bfe703add0eb6652a1c950acfba55fa040028002000d88014007900fe8800000000000000000000000000010800af000f02000008000d0064010100b010f2800c00e100060000000000000022002d00aadeb7cd564e0cd5ca1335617fcc57603716aae5ee6d86bdd71207c64e34000004008d80914b271afcf6e0ef1b0682ba45e4e3e10ad13f93910ec85783c7f6e7d91f1ed3b3a24f66c12e6e622d0f2179ea50823371acfd997eb11c41613c6a30013409b6efbf6dcbcce05611eb4d84712567a146f8c6d0b96b1ecb57e90a346c6f4be9a934d0eb38d155f6fbe9a39a4a9d8fb33f6c0c25197be1f720627ca7eafb271c8458ebf2f37e294f8e27f3a2caf8a4c68b09d4612d19aa8f3c014bc5ae0f25071ee09920763c9c63f74429e35ec34c2efb5e690bbe1c30ae27e0bc33466014a578bfa2905d00168eba1443ede0791c7afef79bd865bf9de5f8dd8046723d948f8c5b9f6a041f42745fa12d29ff5bca470dcd7d6ac10b1c9c4d25fbc28074f3f7aa6203f839e4f46133f3db19aee1094899f7d821776fb58740b83835b047856bcdeb2503c81fde69730bac07b34950f64a6c1c51b44256cdae64709ce80f5e58d464b20eeb28609bee58afac63eb9de0c3d8940be8fa9cf07a20943464ca818ba9fd93e5407b4e38ec4faf1cb1d3e921dcc1f3c7ab313650801188aae911928d158125a7f92799b7a65435622760b29468dd867e12f65e452241ea1abd3964a336c5e7e3189343c62447d0061ba9b7a13bccf5ed90b3d245cbe0e46e72f915f97bcdc43e60e5e07a325c0d703c33cbdb1a228453e108bb2dc7464d492928ac3abf865a2ef47f35fa1c44d55c1e193524416e8e94f5e0dca6baa5678108ca4277b53b9fe1de94ca27ae6e919dd220d430b5a9f30e0b7a339472955b1617321cfc608f2a7374a62ec5e52c500d02b65ea415aba2f259172cb33487400d877fa0b02e6116024021c814a5c06c36ea1c7ed4d7c4b9f27fbb52fefd6095c9209a3aac720fffaf08dfda8c0c80a34f7a48ae63967a3d27764f44a5bbb44696f5d0f2bdd47e105a89daa0987d903302953a94c5ffc27fbf26aa44da19e2be66645b696884284a524af24c6f3170c65c4024daaa9bfd95a04e365f9ab02f7b3d76669261d50bb82ebee6a9ce2f6f7b2f0b02ac546587f2ddba41dc01dcae04f86c644f5034061577d20a574954bae91841ceee374394e888479e0f71fc680a846c43215305db8e05d09143d3ebe488c64554f93ed51f465dfd0f42f2086aa1d7fee7c54def5839510e2109eda9b5833c9033ad1bf4fb688f33118b26a36572c24b9746ea00b415a6129c8b8c5461b0406851c7ae7dabccd70d5cbe163aa082ecabde142837dabcf3d6731d85f1d97943aa2ae3d3a44b30771ebe661a4444b6549600b37b4ebc7d054755b8b8b167bcf9e046c73d29f1d0c49ce0a84ffded2d1b12f392682ab1d16ae886453333c88e2151013c2d401933334ce7e3c690c5a52a26c2b084a82fe2d51c9d6e4bea5f4c2c105f876f22c8d3645ff5372ae0b71a65419d8fc2d68b2fec0554f9835512112b581ef9b82dba84276e30507a8b3ed5a651a57125fc2b77001c8b6534b8cd6e252d23e45c20fbc81fb8a3d70fb4d052fbbf5a4e740b995da643de89744f16dade0acac2e07074ac1b59ca4fd134f7fead643c6e6da14f2a5c0f680ba76a78c291dc80bb87598e490a87ee434632bce2b80aabc87ce91c8caa6bd8836c84cb3e550c7f0ecad22ae8c76e0a088f1b4df09176c7264363cebfa41d4c844c479452b90af4a4c927f0afd71d7408ed3ff275437981f6f59e3ff310e665f54d0f6923183790c7692ce3a450263b844393c891afbc8caeae3c40c83b122673ef4734141f73d52547fee556592560432aff30f642fd021c5ced33225c3e008eb4ba13baaf9fd5638e84554b55964a2f126513787587c1877de0770ccf1abaa081ea519a15cb2c4f0c2291cbc6367b261564340ae48cc084ba68d82987056171077f2fff5efe6baeb3fcfe7718e71fdf6623530e46425a1af7e685eb7e26b014a38b1d0f3f7b5373b10189d772fb1eda071075fc2fd5fdd4c063e7931a9ccac22e2aba82280d03e99e9b2f7a8abaaecb8bd626a33d3cd2cdfe220b7bf7e978f7b1459f8980c423e21a3ecb5ef2b6a97227b2ba569d5050dfa47e3c97c173a8005d4eef32de95402f73a16a17016ca57b2fed9255cef64cb8fe43e8d77ac343c0761c0d0c3cd99f5f52fa6db8e6fa7841b734fe88ab1f265173037cea9eaedd18f491bc2ad788c43f464dbdf8be3ce64f8ba2e72ecca2313d8d4055bf33dcdc7d62daf435ca77c4efc89613ab58b6fe813047907cc1d77bb0f73c0567e863a5c71074b0611b44132fa7823c3c897d3d8c52bf999540fb8e2e843e2bea7c6ce0a23578357f67653b1247b16bad5aae772b9fe260c461e5ec786fdc788af4fe605392d57e9b2a52ba5af5bb2c074cbd74da76fe7db641825b78f538f9d5bd6944231aa2b105ae07ffb23d72ce27d5c138492ca9434ceebc3290846a69286e5bc151dd9f744b321e0cd83933c7471eafb6ef321931a83c895dbd18902d1582d9ef1100fb2ce7624e05168a292cb04584cbd3dcc30c9e8203ffe2c221b912d5337ec4894b86b793a0c4f07864b2530812b7cb58e707ffa3597ebade8640cdde2431335ff4c6ff665c6a9b6a71e4a5e56e611f112b6ca3f15625722c085e4fbd7f2aeec9655cb0ef97fdc2aedc925e8c49a6cfc7416bf25e1e616f1cdaa5987b890bf14665794834155e1db2d9898181c79bf30848f1aa0729edb9f2bfbd3ac8144ef815f17d768f8d34f99b01a83ec16f2476b7c7e06327ead774c2cde4b40dae2f7b59a6fddbb5ad310f74f3af11bddd48aa466eb0f8470821f699c25e4d4d86d5dcd549b983c8412fe4920d42db238d36c961539ca3202ff3cc3b21c6e1e4e972e51aed9b59b54072fc58480bb8cf31a57be8269e6924341b043996a52399bd7c7d187c4d8d62a6e61a218e7facc87fa6a57643a22407e380696eb5fc73c7b113141947194a95f6b31568de53485f69292fd73c1e37a97d91b6786c99c0454936c0e222c7ed07d016e871c62bc7300d6a619b61836b437a235ea8bcd9d364d561d997932d9446ea6553ec5e0899bc5d5d44fecdfd7ebb22cb18b54f066a16f0c6967f40a56d3f4e0b3e2c35a06991a2663735eb6728fba83b197ff6ff0a6e314a3a813bf23b3ed644dbb54da0de2c7d9d807e237bee175e831b69a80470b8fbc4b175be360d1a68b5ba9fc10b9836d984e0c99ee0eec6f6da89e8886828139e58c4e8e397a4dddc11b96734521dc9211354bf1d992b4c7124e7587708bd7ae5d107a8265cc93b4995376a858ab6ee088ad08445eb8ed44313bcb99c35fd1b237ea0462e4bef566ef2a1a183895d201b29959f5d4dd9ace4fbc9a0910b038ee435fd0c9b49bcbaad7d73799926ac9679c8fb492ea97e81a7940661d6787ecf43c435ba8268830f9cf9de3c2efda7b2880795388c5a2dfba35400bd5d43ad7f2bbe7d55293aa17012473e44beae5627951bb45fe49c565cd64cceed09c8fff5da4936ff765659871a0aaa365a9c9885f73d3b80e7b43b705435618d8fd7215ff3199189c71426f5404b3d0e28653e38cd4abdc7663cac9ca89caf55a06a4a59a6fefa97907e4316b1ce4f4cb61c35c1ced41e8fe1725a8a0d202d5be363daa76abd9b2ece927355931b801bd5550b00bbadddf2dfdf917c797ac978c766da7b3e5331d7e18faf0437e0f8da6317e1059563ba34caa5a597e1eefae98f412c51c0a57dc6fbb7fde0ff000337372e9c4c60b21688e8d61f619398950719d275161f6d728dd0ce856527fd7517d2ec468056d84f019c4e17f424eb3985cb3fe1362769b62ad6ef23aeb9bddf10a6a317a95a96b97461e31e01c8c0abde7ff4a05e56fdd726d2a42673bfbd9418d0f90c603ce49882e299d4ab78b267102d006de7d1d4cfae7bfb26d5a722c09629947fbd38175f8645d048c159018c15937c2ffe63c9fd6cd37cfba8e6c9e4f60afbecbfdd33e5ffb97aec51cb4e464cc0db4d7ffb4f0f11cb20499e66c36ece390fe17827e8e1161ce6f0f770fcc3858b8e50cfb1306c13fffa474736183cd410fd3f5e5b07f211c6a8868a8e1f69600276b639c97e4751d8a782b65149234c07586240a580c317f1482822c858770bf5b1146e5309d87351241fb599fe1d1fbd07da00e6a4b25d1ba5129921e09aab14ee10c4219d079bf1f3bd0a96c66fc2e2eb5a0bcbc7c6040383d31f78594fea1434874ca7663102301c909c75425ad18b166d6859a02b81a5534cba7921930d97a03dd096f6670105f235cd89b5e065b7df88757d0a612adb779e7ad665800443a8bf3e3a8d409927b5e390ff9dbf3b6cbb124bb3c3ad9ac230524776d3d2adf600d535f6ddaa3c594194f6fc01a8e2e446d38abb7c36c44c3b747f00f45345ef9903fa09b0aff53d12273c347e2529c3c45c9a8d7896a9c09ca3e4f68cb9a61e69a33d59f3977155dd5a54d9dbd5d67c3737840ee80e29c433328fd77fa506b0e200cdfe41af92aa659dbc3d48744c6000b1cf1c30fbb852e3a0982f6277e48597831854177c94edcbaa497919bbfdc2f5f3a528dbd1d141968a9ef990b0fe030f3d1bb1498dc2bc0164d31f7b918619b080e8febdef1ad84f7d24340a4974a3012c8cd6cb2dfc4f2ab874b8ee3866f9dd2193a9e6f7034f1de65ab8c33aaca49915b0de33353719ff255738b67626a75b511ad4f301a27d46b6ac50ab7c3e2f0c1968488be9803ee9a312040beca3a7026011198e5f8dd52dec0ca96311d5e2522ea55f8b2ab2bf72111ca1c18a7cda6e563b126837f4c685d4803dc193b9a5f3c2c0648be56a25bb4489aeda83c3a10b2981713ef251eb412f25a21f2796b2cab732d31df9d9490ed29853454ddf16915b28b5df58cc789a5d0eb801cd00dbb1d063008844fbb39a2ad7b16b3787e1c5f6de204629433c73553868e279bd73782fbd246f2daa79c34ddbe81cddb8576650e39b74617f0ae5242c2c968686372e1fd3f1d730403ef8041622512a067b7e011231882949a261c4d95452994c5409a24230b181e9f70c287c2128851d98ffa4e177a53838bbec1e9db187a18a5a2ea7f88006f632be0de22beeab7c07549c757209740c8fd38aa31d3498188343e4d3f707818f657f0bfa76c28ac8c9b56ac7abafc0b506295eede88121c5ce249aad91c952025eaaa916d41efdfc0074b83e76831125a89a7803bb5d808879c37740205e1b7b4b9280382b264b010bdd865572ae0ae24514bd8dd28da68b3c781a8c65d865d495dea0d7918cde2b91c4374c5ddc97310497567f20646a1156f185024fd1b8b87e2097c82e133eb9f6f5abfd3da53298f2ddab53245a8d238e9a57344e244b070be4a8a16274a0e3e787e9fe3b04ed908324df9134799936af9eff97552aad1d16144caa3df310505c4247afca1e0182c38081ab220dd126892dd51a552a0467f53a1fc03e18420ebb3bda16a5b66f20cf823b321636371f200881294c3e36715bba8cfe5c0c6cfe126165777dddff85df836566b33afc366d62cb1aa6dfe4f8ce064eb5259ef8476c2976b48185cbf57fa46155667f9a3c2b0d8e2087016d9264913e8a08c74a232f7c24885aafbea951787f8de18f3820e35d0c2bb4fed9bca2b825d92f94172265abcf559ece0f5a9a1bb32114522097d08587f7b0e8c20257c0dcdf2dfbe72eb3611b07748ec409a4c04fbc6b4d3ad56bc0acded15b9f0be200af44a66aa86d3a1ff57fea2d7c1780a642b65a6342a0be98574dfec449e8431e4fb7429fb121187494ddb79b53f0598a698413206ccdc3d57105d4394cabfc86cd5d943fea8a7df0040092800800c900800000006a00120053aea6b9531b03a8a82e5fe87cebace187dbbf19ce6c07ac924c181db3bb25ec67ad4082a29ad06f35887bfdb38d868d4312fba291c7820129fc0dfc66ef355bbea0dfcd67134f1b90db3e24285c73f64f6c5702d64e25b7db75b3e0e600a50d5b5059e54600000008004400"/4474, @ANYRES32=r0, @ANYBLOB='\b\x00m\x00', @ANYRES32=r3, @ANYBLOB="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"], 0x12fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf25020000000400020018000480140029800800018085f65a9a08000200", @ANYRES32=0x0, @ANYBLOB="b304a23a05000000ffbc994d4c7f6f24f773a427efa7fb1b6ca88dddc2adf6de8d80478aaed373bec658319e38b6624da6443987c55f20d42a122b98124ff879e567da4fed32be51407b26913b7fbe63034e7fdce76d20bf0748e326f003ffa9acc8a77a8a911e7ac77d946b2701ad86c2f326e165da3ad054a980bf3e6e4cf4f0c9e119953037c39cb1391f23571fe56e7b"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) 3m15.265128989s ago: executing program 3 (id=700): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x100000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x801, 0x6) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) 3m14.920606487s ago: executing program 3 (id=701): r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) read$auto(r4, 0x0, 0x1f40) statmount$auto(0x0, 0x0, 0x1fe, 0xd) 3m13.536725836s ago: executing program 3 (id=705): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x29, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x9, 0x2, 0x81, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) mmap$auto(0x9c6, 0x8, 0x8, 0xeb1, r0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket(0x23, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3m12.950479766s ago: executing program 32 (id=705): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x29, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x9, 0x2, 0x81, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) mmap$auto(0x9c6, 0x8, 0x8, 0xeb1, r0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket(0x23, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2m54.971928741s ago: executing program 0 (id=745): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7d, 0x5, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r1 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) setsockopt$auto_SO_CNX_ADVICE(r1, 0x2, 0x35, 0x0, 0x81) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x8, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x2a540, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4800) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2m53.616668143s ago: executing program 0 (id=741): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto(0x3, 0x5605, r0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) swapon$auto(&(0x7f0000000000)='@\x00', 0x79) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x6) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x51) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(r1, 0x0, 0x57) 2m52.437743147s ago: executing program 0 (id=743): write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x1, 0x7, 0x3, 0xfffffffffffffff9, r3, 0x5) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000072, 0x400, 0x2}]}) 2m51.670048005s ago: executing program 0 (id=746): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon13\x00', 0x440, 0x0) socket(0x29, 0x2, 0x0) get_mempolicy$auto(&(0x7f0000000280)=0x8, &(0x7f00000002c0)=0x9, 0x2, 0x81, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) mmap$auto(0x9c6, 0x8, 0x8, 0xeb1, r0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket(0x23, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r2, 0x0, 0x1f40) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x9, 0x0, 0x0, 0x3) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 2m45.681868115s ago: executing program 0 (id=759): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, r2, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x290601, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r4, &(0x7f00000004c0)="c9432739b5580773", 0x8) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000300), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="130029bd704fb068c18e97d09150d3fdaa6dd200fbdbdf25030000000400080914000180080002800400325908001400a9c12c20"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) 2m41.046705492s ago: executing program 0 (id=768): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x13, 0x67, 0x0, 0x8) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x8810) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x40, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r4, 0x4, 0x3, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xfe, 0x129, "4ac6dec712402b23f314c09dfa54e46c603b80ff8f6ac4a02e3571d0ca76667fcfbf2ce7c3e7c17d2cee192028e49ffe2b74f10de51c2e644fb99ac3fbf14e73181dc8538c0c92fadf7d55060e719df104d534f711ee9698bec325ac7bb582fcf428fae1173474c643a2bcc10f9ac18fe4f4cf2090f896116f5e4e51377586471bf9649d924002c2b3b832d3ece4f9e664d034ba7d1357922caa51574a9ca2dd2fac8581a87b23ad6c9d7303cbb7b30bb1b35b5fc3feef771c9959db4208ee6a057eed5f98a961622af64b8740fd48429251063f1d00bb8c0ba9c646866aca6e14f53148d57df9ed377764ffdea771218af960d77b460b5a2c5c"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x7, @local}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) 2m25.963799205s ago: executing program 33 (id=768): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x13, 0x67, 0x0, 0x8) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x8810) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x40, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r4, 0x4, 0x3, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xfe, 0x129, "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"}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000004}, 0x40001) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x7, @local}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) 5.5459267s ago: executing program 2 (id=1446): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ipvlan0/temp_valid_lft\x00', 0x2000, 0x0) rseq$auto(&(0x7f0000000100)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6, "7eea5beb126abb95aa0ccc9adcfbcc5918cd708c0a6a32c1cad223"}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2, 0x801, 0x100) ioctl$auto(0x3, 0x894b, 0x38) read$auto(r0, 0x0, 0x6) pwritev$auto(r1, &(0x7f00000000c0)={0x0, 0x8}, 0xa, 0x7fffffffffffffff, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x1e, 0x5, 0xffffffff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) write$auto(r2, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x2) 4.774204606s ago: executing program 2 (id=1455): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) 4.426848556s ago: executing program 4 (id=1458): r0 = pidfd_open$auto(0x1, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0080f5}, 0x40) r1 = socket(0x27, 0x3, 0xb) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000b, 0x6187, 0xeb1, 0x401, 0x8000) writev$auto(0x8, 0x0, 0xabc) close_range$auto(r1, 0x8, 0x8) io_uring_setup$auto(0x4, 0x0) io_uring_register$auto(0x2, 0x16, 0x0, 0x7) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cpu/0/cpuid\x00', 0x420840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000400), r1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye7\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r4, 0x5414, &(0x7f0000000080)="a2") readv$auto(r3, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010029bd700000dcdf25030000000400028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x810) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x20a00, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb2, 0x405, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000140)=""/168, 0xa8) mmap$auto(0xfffffffffffff0d8, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0xf3c) 3.715965309s ago: executing program 2 (id=1461): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/irq/5/actions\x00', 0x22040, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/irq/5/actions\x00', 0x22040, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) ioctl$auto(0x4000000000000c8, 0x400454cf, 0x3) (async) 3.694385134s ago: executing program 5 (id=1462): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.484882633s ago: executing program 2 (id=1463): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) unshare$auto(0x20000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.sectors\x00', 0x182, 0x0) sendfile$auto(r1, r1, 0x0, 0x88) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.483789622s ago: executing program 5 (id=1464): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (fail_nth: 2) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5) 3.3244987s ago: executing program 4 (id=1465): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x4, 0x9, 0x7, 0xffffffffffffffff, 0x20010180, 0xa}, 0x98) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pipe$auto(0x0) r2 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_supply_map_fops_(r2, &(0x7f0000000080)=""/78, 0x4e) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(r3, &(0x7f0000000540)={0x0, 0xfffffffbfffffffa}, 0x2) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) vmsplice$auto(r1, &(0x7f0000000080)={0x0, 0x7}, 0x1004, 0x2) 2.837721846s ago: executing program 4 (id=1467): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x29, 0x800, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) 2.665388429s ago: executing program 1 (id=1469): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x142, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9) unshare$auto(0x8000000) 2.563130534s ago: executing program 5 (id=1470): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9) unshare$auto(0x8000000) 2.520747816s ago: executing program 2 (id=1471): socket(0x18, 0x2, 0x0) unshare$auto(0x40000080) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5523, r0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) 2.519929007s ago: executing program 1 (id=1472): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80200", @ANYRES8, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead8"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x24040000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c06000002000000000000007f00000000000002071b", 0x4b}, 0x2, 0x0, 0x5, 0x3ff}, 0xa2}, 0x2, 0x100) 2.369972086s ago: executing program 5 (id=1473): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r3, &(0x7f0000000100)=""/153, 0x99) getpid() mincore$auto(0x1000, 0x8001, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) 2.148620272s ago: executing program 1 (id=1474): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x800, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=@prog_bind_map={r0, r1, 0x3}, 0x8) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x9, 0x8, 0x18, 0x401, 0x300000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) chmod$auto(0x0, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="18000000", @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) 2.102368366s ago: executing program 2 (id=1475): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x2, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptybe\x00', 0x6984c0, 0x0) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x1) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x8, 0x7, 0x3, 0x12, r1, 0xffffffffffffbc3f) r4 = socket(0x13, 0x801, 0x6) setsockopt$auto(r4, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x2, 0x4, 0x400, 0x12, 0xfffffffffffffffa, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) keyctl$auto(0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x101) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r3, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20008800) capset$auto(&(0x7f00000002c0)={0xfffffffd, 0xffffffffffffffff}, &(0x7f0000000380)={0x5, 0xf, 0x80000000}) r6 = prctl$auto(0x3, 0xb, r5, 0x8000000000000000, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_USBDEVFS_BULK(r6, 0xc0185502, &(0x7f00000003c0)={0x1ff, 0x9, 0x0, &(0x7f0000000440)="a3e9177a47235f555dc81b2805aa80b035b6399213780497b49fe426efd65a4c6b3b8790d490d3af6a50b99494322324f105012171714f62c09df6691f498d39f90ec972c982b26c1014ae13b09c5dd4988d95d7976d6cc0af5ff6e0b376a6f7cc479d90fa762aba58b6481587a4f637b34ac47c2b4c806d9fe00775bb93f14a42c5e89b741dc77a7ef3bcc72491b610b36af57335ef3e70a429a9e39c8ec681a000ff3781318ad7463a5af93be99f3c81ddebac532cc73d2133b0a9aee8f9adee382a47543ba2a8f2f9aa42613b14f480de0bbd2dbef5"}) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) 1.846086849s ago: executing program 4 (id=1476): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0xfdef) 1.507452146s ago: executing program 1 (id=1477): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xffc3, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 6) 883.301189ms ago: executing program 4 (id=1478): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ipvlan0/temp_valid_lft\x00', 0x2000, 0x0) rseq$auto(&(0x7f0000000100)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6, "7eea5beb126abb95aa0ccc9adcfbcc5918cd708c0a6a32c1cad223"}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) r1 = socket(0x2, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x17, 0x0, 0x9e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2, 0x801, 0x100) ioctl$auto(0x3, 0x894b, 0x38) read$auto(r0, 0x0, 0x6) pwritev$auto(r2, &(0x7f00000000c0)={0x0, 0x8}, 0xa, 0x7fffffffffffffff, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x1e, 0x5, 0xffffffff) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) write$auto(r3, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 539.934652ms ago: executing program 5 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYBLOB="3899b252", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x80000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xf1, 0x80, 0xfffffffffffffffc, 0x5d, [0x3, 0xc1, 0x7fffffff, 0x6, 0x76, 0x9]}) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x1, 0x2, 0x0, 0x0, 0x3) io_uring_register$auto(r2, 0x9, &(0x7f0000000240)="8d54fda837292c2cf9a112c9d7adfbe0487e56dfcfe56f8594b425b4ae6332aa7e968789f511863ffaa529933a9ca37ec6b4984f8bc28f17fb1b15aa0306f02a12596cf95f35e9330d3f7af8161b4076d911066c19bb87138fd3cf69326703ed9cc73eda507f87d3a81c7c958cfc9ebb477f91d6becca01daaa9d68a6f7236ba11eb4d11bdbf0d7a4a264819471e7c5dc22524", 0x1dac) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) r5 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000040)=0x1) fsconfig$auto_FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='\\]$\\\xc9--\x00', &(0x7f0000000100), 0x31) read$auto(r3, 0x0, 0x4) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f00000001c0)={0x0, 0x7}, 0x3) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xb9d6, &(0x7f0000000300)="7d6e9224e6992ef39d82adfba5442576842023ad8c86360b6d5b2c79cfcd6d4639aaeac8caeefc74cc4bf3ff265cbce8132619b940b1c7d727e1134c4131a09de3b3b6a6df4c6f8262f089530b5d7459b141994306affe55244d3378224110af262bf416ae830fed8bd900ce85d5f258ded130d5f53708dcbf7d") linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9) unshare$auto(0x8000000) 94.042027ms ago: executing program 5 (id=1480): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) mmap$auto(0x0, 0x40009, 0x5, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptyed/uevent\x00', 0x80002, 0x0) read$auto(r1, 0x0, 0x6) r2 = open(&(0x7f0000000280)='./cgroup\x00', 0x0, 0x64) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/power/control\x00', 0x280106, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000001}, 0x3, 0x10000, 0x10) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000040)=""/17, 0x11) fchdir$auto(r2) mkdir$auto(0x0, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\x00\x00\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x18, 0x2, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) r5 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r5, 0x0, 0x0) 93.910159ms ago: executing program 1 (id=1481): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x1f00, 0x0, 0x0}, 0x58) 2.806847ms ago: executing program 1 (id=1482): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80200", @ANYRES8, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead8"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x24040000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c06000002000000000000007f00000000000103071b", 0x4b}, 0x2, 0x0, 0x5, 0x3ff}, 0xa2}, 0x2, 0x100) 0s ago: executing program 4 (id=1483): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x686042, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r1, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x2c, r4, 0x705, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) waitid$auto_P_PGID(0x2, r5, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigpoll={0x200, r0}}}, 0x7, &(0x7f00000003c0)={{0xa, 0x8000000000000000}, {0x5}, 0x7, 0xfce3, 0xfffffffffffffffc, 0x8, 0x224, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xec}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x922e}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) fspick$auto(0xffffffffffffffff, 0x0, 0x6) kernel console output (not intermixed with test programs): ompressor 000 not available [ 443.542610][ T8820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.551527][ T8820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.559595][ T8820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.568586][ T8820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.576410][ T8820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.133207][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.139616][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.604268][ T8820] Bluetooth: hci4: command tx timeout [ 445.638501][T10128] chnl_net:caif_netlink_parms(): no params data found [ 446.842731][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.873862][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.881051][T10128] bridge_slave_0: entered allmulticast mode [ 446.966286][T10128] bridge_slave_0: entered promiscuous mode [ 447.004924][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.012050][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.106522][T10128] bridge_slave_1: entered allmulticast mode [ 447.156774][T10128] bridge_slave_1: entered promiscuous mode [ 447.595805][ T30] audit: type=1800 audit(4294967348.605:5): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.808" name="discovery_nqn" dev="configfs" ino=29795 res=0 errno=0 [ 447.685019][ T8820] Bluetooth: hci4: command tx timeout [ 447.812720][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.869670][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.397084][T10128] team0: Port device team_slave_0 added [ 448.438583][T10128] team0: Port device team_slave_1 added [ 448.986165][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.993159][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.183109][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.483391][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.528108][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.667540][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.765657][ T8820] Bluetooth: hci4: command tx timeout [ 450.301309][T10128] hsr_slave_0: entered promiscuous mode [ 450.346254][T10128] hsr_slave_1: entered promiscuous mode [ 450.352376][T10128] debugfs: 'hsr0' already exists in 'hsr' [ 450.391687][T10128] Cannot create hsr debugfs directory [ 451.528695][T10128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 451.670454][T10128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 451.847061][ T8820] Bluetooth: hci4: command tx timeout [ 451.880220][T10128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 452.042188][T10128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 452.074751][T10204] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 452.231505][ T8820] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 452.231536][ T8820] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 452.250844][ T8820] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 452.250896][ T8820] Bluetooth: hci1: adv larger than maximum supported [ 452.258873][ T8820] Bluetooth: hci1: adv larger than maximum supported [ 452.265555][ T8820] Bluetooth: hci1: Malformed LE Event: 0x0d [ 452.669778][ T8820] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 452.669807][ T8820] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 452.684651][ T8820] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 452.684675][ T8820] Bluetooth: hci1: adv larger than maximum supported [ 452.691834][ T8820] Bluetooth: hci1: adv larger than maximum supported [ 452.699022][ T8820] Bluetooth: hci1: Malformed LE Event: 0x0d [ 453.175775][T10216] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.262775][T10215] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 453.420593][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.476704][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.642873][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.650019][ T8785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.130188][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.137348][ T8785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.191390][T10223] FAULT_INJECTION: forcing a failure. [ 454.191390][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 454.266945][T10223] CPU: 0 UID: 5 PID: 10223 Comm: syz.2.819 Not tainted syzkaller #0 PREEMPT(full) [ 454.266973][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.266987][T10223] Call Trace: [ 454.266993][T10223] [ 454.267001][T10223] dump_stack_lvl+0x16c/0x1f0 [ 454.267034][T10223] should_fail_ex+0x512/0x640 [ 454.267064][T10223] ? __kmalloc_noprof+0xbf/0x510 [ 454.267090][T10223] ? lsm_blob_alloc+0x68/0x90 [ 454.267107][T10223] should_failslab+0xc2/0x120 [ 454.267135][T10223] __kmalloc_noprof+0xd2/0x510 [ 454.267160][T10223] ? down_write_nested+0x151/0x210 [ 454.267195][T10223] lsm_blob_alloc+0x68/0x90 [ 454.267213][T10223] security_sb_alloc+0x28/0x230 [ 454.267235][T10223] alloc_super+0x23d/0xbd0 [ 454.267257][T10223] ? sget_fc+0xd3/0xc20 [ 454.267288][T10223] sget_fc+0x116/0xc20 [ 454.267318][T10223] ? __pfx_set_anon_super_fc+0x10/0x10 [ 454.267341][T10223] ? __pfx_mqueue_fill_super+0x10/0x10 [ 454.267360][T10223] get_tree_nodev+0x28/0x190 [ 454.267385][T10223] mqueue_get_tree+0xf1/0x130 [ 454.267404][T10223] vfs_get_tree+0x8b/0x340 [ 454.267423][T10223] fc_mount_longterm+0x18/0x160 [ 454.267457][T10223] mq_init_ns+0x426/0x620 [ 454.267483][T10223] copy_ipcs+0x383/0x610 [ 454.267505][T10223] ? copy_utsname+0xab/0x470 [ 454.267535][T10223] create_new_namespaces+0x20a/0xa90 [ 454.267559][T10223] ? security_capable+0x7e/0x260 [ 454.267583][T10223] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 454.267609][T10223] ksys_unshare+0x45b/0xa40 [ 454.267644][T10223] ? __pfx_ksys_unshare+0x10/0x10 [ 454.267674][T10223] ? xfd_validate_state+0x61/0x180 [ 454.267713][T10223] __x64_sys_unshare+0x31/0x40 [ 454.267741][T10223] do_syscall_64+0xcd/0x490 [ 454.267773][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.267794][T10223] RIP: 0033:0x7f3062f8ebe9 [ 454.267810][T10223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.267830][T10223] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 454.267849][T10223] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 454.267862][T10223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 454.267874][T10223] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 454.267886][T10223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.267898][T10223] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 454.267923][T10223] [ 454.531234][T10128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 454.541660][T10128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.642409][ T8801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.740666][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.861485][ T8801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.250438][ T8801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.530820][T10245] Invalid ELF header magic: != ELF [ 457.708801][ T8801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.016340][T10128] veth0_vlan: entered promiscuous mode [ 458.075876][T10128] veth1_vlan: entered promiscuous mode [ 458.411903][T10128] veth0_macvtap: entered promiscuous mode [ 458.490647][T10128] veth1_macvtap: entered promiscuous mode [ 458.592641][ T8801] bridge_slave_1: left allmulticast mode [ 458.619630][ T8801] bridge_slave_1: left promiscuous mode [ 458.625376][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.699257][ T8801] bridge_slave_0: left allmulticast mode [ 458.725429][ T8801] bridge_slave_0: left promiscuous mode [ 458.751860][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.980075][T10293] FAULT_INJECTION: forcing a failure. [ 459.980075][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 460.050310][T10293] CPU: 0 UID: 0 PID: 10293 Comm: syz.2.833 Not tainted syzkaller #0 PREEMPT(full) [ 460.050359][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.050372][T10293] Call Trace: [ 460.050378][T10293] [ 460.050387][T10293] dump_stack_lvl+0x16c/0x1f0 [ 460.050423][T10293] should_fail_ex+0x512/0x640 [ 460.050455][T10293] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 460.050486][T10293] should_failslab+0xc2/0x120 [ 460.050517][T10293] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 460.050545][T10293] ? sock_alloc_inode+0x25/0x1c0 [ 460.050585][T10293] ? __pfx_sock_alloc_inode+0x10/0x10 [ 460.050620][T10293] sock_alloc_inode+0x25/0x1c0 [ 460.050666][T10293] alloc_inode+0x61/0x240 [ 460.050720][T10293] sock_alloc+0x40/0x280 [ 460.050760][T10293] __sock_create+0xc1/0x8d0 [ 460.050789][T10293] __sys_socket+0x14d/0x260 [ 460.050819][T10293] ? __pfx___sys_socket+0x10/0x10 [ 460.050844][T10293] ? xfd_validate_state+0x61/0x180 [ 460.050882][T10293] ? __pfx___do_sys_close_range+0x10/0x10 [ 460.050917][T10293] __x64_sys_socket+0x72/0xb0 [ 460.050941][T10293] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.050973][T10293] do_syscall_64+0xcd/0x490 [ 460.051010][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.051034][T10293] RIP: 0033:0x7f3062f8ebe9 [ 460.051052][T10293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.051075][T10293] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 460.051097][T10293] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 460.051113][T10293] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 460.051127][T10293] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 460.051141][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.051155][T10293] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 460.051185][T10293] [ 460.051216][T10293] socket: no more sockets [ 460.443089][ T8801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.465268][ T8801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.514512][ T8801] bond0 (unregistering): Released all slaves [ 460.675427][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.820897][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.836254][ T8801] HfR: left promiscuous mode [ 460.990147][ T9231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.064247][ T9231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.217400][ T9231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.282325][ T9231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.030414][T10326] Invalid ELF header magic: != ELF [ 462.130725][ T8785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.195951][ T8785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.332837][T10329] ima: policy update failed [ 462.347834][ T30] audit: type=1802 audit(4294967363.348:6): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.838" res=0 errno=0 [ 462.538555][ T8801] hsr_slave_0: left promiscuous mode [ 462.578766][ T8801] hsr_slave_1: left promiscuous mode [ 462.612333][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.637685][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.673856][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.722366][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.842079][ T8801] veth1_macvtap: left promiscuous mode [ 462.877218][ T8801] veth0_macvtap: left promiscuous mode [ 462.908443][ T8801] veth1_vlan: left promiscuous mode [ 462.939083][ T8801] veth0_vlan: left promiscuous mode [ 464.200518][T10346] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 464.969954][ T8801] team0 (unregistering): Port device team_slave_1 removed [ 465.052176][ T8801] team0 (unregistering): Port device team_slave_0 removed [ 465.495166][ T8782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.538604][ T8782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.311145][T10398] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 467.317841][T10398] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.511342][T10402] FAULT_INJECTION: forcing a failure. [ 467.511342][T10402] name failslab, interval 1, probability 0, space 0, times 0 [ 467.597125][T10402] CPU: 0 UID: 0 PID: 10402 Comm: syz.5.854 Not tainted syzkaller #0 PREEMPT(full) [ 467.597162][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.597175][T10402] Call Trace: [ 467.597182][T10402] [ 467.597190][T10402] dump_stack_lvl+0x16c/0x1f0 [ 467.597244][T10402] should_fail_ex+0x512/0x640 [ 467.597278][T10402] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 467.597322][T10402] should_failslab+0xc2/0x120 [ 467.597354][T10402] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 467.597381][T10402] ? sock_alloc_inode+0x25/0x1c0 [ 467.597420][T10402] ? __pfx_sock_alloc_inode+0x10/0x10 [ 467.597454][T10402] sock_alloc_inode+0x25/0x1c0 [ 467.597507][T10402] alloc_inode+0x61/0x240 [ 467.597540][T10402] sock_alloc+0x40/0x280 [ 467.597575][T10402] __sock_create+0xc1/0x8d0 [ 467.597602][T10402] __sys_socket+0x14d/0x260 [ 467.597638][T10402] ? __pfx___sys_socket+0x10/0x10 [ 467.597660][T10402] ? xfd_validate_state+0x61/0x180 [ 467.597693][T10402] ? __pfx___do_sys_close_range+0x10/0x10 [ 467.597725][T10402] __x64_sys_socket+0x72/0xb0 [ 467.597747][T10402] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.597775][T10402] do_syscall_64+0xcd/0x490 [ 467.597808][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.597830][T10402] RIP: 0033:0x7fa079d8ebe9 [ 467.597846][T10402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.597867][T10402] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 467.597887][T10402] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 467.597902][T10402] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 467.597915][T10402] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.597928][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.597941][T10402] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 467.597968][T10402] [ 467.602399][T10402] socket: no more sockets [ 469.464902][T10451] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.471340][T10451] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 471.999197][T10500] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 472.143929][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 472.595515][T10512] FAULT_INJECTION: forcing a failure. [ 472.595515][T10512] name failslab, interval 1, probability 0, space 0, times 0 [ 472.691913][T10512] CPU: 0 UID: 0 PID: 10512 Comm: syz.2.876 Not tainted syzkaller #0 PREEMPT(full) [ 472.691946][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.691960][T10512] Call Trace: [ 472.691967][T10512] [ 472.691976][T10512] dump_stack_lvl+0x16c/0x1f0 [ 472.692013][T10512] should_fail_ex+0x512/0x640 [ 472.692047][T10512] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 472.692074][T10512] should_failslab+0xc2/0x120 [ 472.692107][T10512] __kmalloc_cache_noprof+0x6a/0x3e0 [ 472.692131][T10512] ? trace_pid_list_alloc+0x27c/0x3f0 [ 472.692166][T10512] trace_pid_list_alloc+0x27c/0x3f0 [ 472.692201][T10512] trace_pid_write+0x10e/0x480 [ 472.692239][T10512] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 472.692275][T10512] ? __pfx_trace_pid_write+0x10/0x10 [ 472.692310][T10512] ? __pfx___mutex_lock+0x10/0x10 [ 472.692342][T10512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.692378][T10512] ? update_last_data+0xb3/0x510 [ 472.692419][T10512] event_pid_write.isra.0+0x3f7/0x7f0 [ 472.692455][T10512] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 472.692497][T10512] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 472.692529][T10512] vfs_writev+0x5df/0xde0 [ 472.692562][T10512] ? __pfx_vfs_writev+0x10/0x10 [ 472.692586][T10512] ? __mutex_lock+0x1c5/0x1060 [ 472.692626][T10512] ? __pfx___mutex_lock+0x10/0x10 [ 472.692669][T10512] ? __fget_files+0x20e/0x3c0 [ 472.692711][T10512] ? do_writev+0x132/0x340 [ 472.692734][T10512] do_writev+0x132/0x340 [ 472.692759][T10512] ? __pfx_do_writev+0x10/0x10 [ 472.692793][T10512] do_syscall_64+0xcd/0x490 [ 472.692829][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.692853][T10512] RIP: 0033:0x7f3062f8ebe9 [ 472.692871][T10512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.692893][T10512] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 472.692914][T10512] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 472.692929][T10512] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 472.692944][T10512] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.692957][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.692971][T10512] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 472.693000][T10512] [ 473.298758][T10524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 473.986695][ T8820] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 474.616306][T10540] FAULT_INJECTION: forcing a failure. [ 474.616306][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 474.727364][T10540] CPU: 0 UID: 0 PID: 10540 Comm: syz.5.881 Not tainted syzkaller #0 PREEMPT(full) [ 474.727395][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.727410][T10540] Call Trace: [ 474.727417][T10540] [ 474.727426][T10540] dump_stack_lvl+0x16c/0x1f0 [ 474.727461][T10540] should_fail_ex+0x512/0x640 [ 474.727492][T10540] ? __kmalloc_noprof+0xbf/0x510 [ 474.727532][T10540] ? handler_new_ref+0x1b0/0xc60 [ 474.727564][T10540] should_failslab+0xc2/0x120 [ 474.727595][T10540] __kmalloc_noprof+0xd2/0x510 [ 474.727620][T10540] ? __asan_memcpy+0x3c/0x60 [ 474.727649][T10540] handler_new_ref+0x1b0/0xc60 [ 474.727690][T10540] v4l2_ctrl_new+0x1963/0x2180 [ 474.727735][T10540] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 474.727777][T10540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 474.727816][T10540] v4l2_ctrl_new_std+0x1be/0x290 [ 474.727860][T10540] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 474.727902][T10540] ? rcu_is_watching+0x12/0xc0 [ 474.727925][T10540] ? trace_kmalloc+0x2b/0xd0 [ 474.727957][T10540] ? __kvmalloc_node_noprof+0x298/0x620 [ 474.727984][T10540] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 474.728022][T10540] ? media_request_object_init+0x100/0x180 [ 474.728084][T10540] vicodec_open+0x1d0/0xf90 [ 474.728118][T10540] v4l2_open+0x222/0x490 [ 474.728149][T10540] ? __pfx_v4l2_open+0x10/0x10 [ 474.728178][T10540] chrdev_open+0x231/0x6a0 [ 474.728209][T10540] ? __pfx_apparmor_file_open+0x10/0x10 [ 474.728242][T10540] ? __pfx_chrdev_open+0x10/0x10 [ 474.728280][T10540] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 474.728313][T10540] do_dentry_open+0x97f/0x1530 [ 474.728343][T10540] ? __pfx_chrdev_open+0x10/0x10 [ 474.728381][T10540] vfs_open+0x82/0x3f0 [ 474.728421][T10540] path_openat+0x1de4/0x2cb0 [ 474.728459][T10540] ? __pfx_path_openat+0x10/0x10 [ 474.728496][T10540] do_filp_open+0x20b/0x470 [ 474.728530][T10540] ? __pfx_do_filp_open+0x10/0x10 [ 474.728580][T10540] ? alloc_fd+0x471/0x7d0 [ 474.728614][T10540] do_sys_openat2+0x11b/0x1d0 [ 474.728653][T10540] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.728703][T10540] __x64_sys_openat+0x174/0x210 [ 474.728740][T10540] ? __pfx___x64_sys_openat+0x10/0x10 [ 474.728787][T10540] do_syscall_64+0xcd/0x490 [ 474.728821][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.728844][T10540] RIP: 0033:0x7fa079d8ebe9 [ 474.728861][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.728883][T10540] RSP: 002b:00007fa07ab24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.728904][T10540] RAX: ffffffffffffffda RBX: 00007fa079fc6090 RCX: 00007fa079d8ebe9 [ 474.728919][T10540] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 474.728934][T10540] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 474.728948][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.728961][T10540] R13: 00007fa079fc6128 R14: 00007fa079fc6090 R15: 00007ffc17473958 [ 474.728991][T10540] [ 477.094770][ T8820] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 478.083613][T10589] FAULT_INJECTION: forcing a failure. [ 478.083613][T10589] name failslab, interval 1, probability 0, space 0, times 0 [ 478.136761][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.5.894 Not tainted syzkaller #0 PREEMPT(full) [ 478.136793][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.136807][T10589] Call Trace: [ 478.136814][T10589] [ 478.136823][T10589] dump_stack_lvl+0x16c/0x1f0 [ 478.136860][T10589] should_fail_ex+0x512/0x640 [ 478.136894][T10589] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 478.136922][T10589] should_failslab+0xc2/0x120 [ 478.136954][T10589] __kmalloc_cache_noprof+0x6a/0x3e0 [ 478.136980][T10589] ? trace_pid_list_alloc+0x27c/0x3f0 [ 478.137015][T10589] trace_pid_list_alloc+0x27c/0x3f0 [ 478.137050][T10589] trace_pid_write+0x10e/0x480 [ 478.137089][T10589] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 478.137124][T10589] ? __pfx_trace_pid_write+0x10/0x10 [ 478.137161][T10589] ? __pfx___mutex_lock+0x10/0x10 [ 478.137194][T10589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 478.137229][T10589] ? update_last_data+0xb3/0x510 [ 478.137271][T10589] event_pid_write.isra.0+0x3f7/0x7f0 [ 478.137317][T10589] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 478.137359][T10589] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 478.137392][T10589] vfs_writev+0x5df/0xde0 [ 478.137426][T10589] ? __pfx_vfs_writev+0x10/0x10 [ 478.137450][T10589] ? __mutex_lock+0x1c5/0x1060 [ 478.137491][T10589] ? __pfx___mutex_lock+0x10/0x10 [ 478.137534][T10589] ? __fget_files+0x20e/0x3c0 [ 478.137568][T10589] ? do_writev+0x132/0x340 [ 478.137591][T10589] do_writev+0x132/0x340 [ 478.137616][T10589] ? __pfx_do_writev+0x10/0x10 [ 478.137650][T10589] do_syscall_64+0xcd/0x490 [ 478.137685][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.137709][T10589] RIP: 0033:0x7fa079d8ebe9 [ 478.137728][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.137751][T10589] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 478.137773][T10589] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 478.137788][T10589] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 478.137804][T10589] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 478.137820][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.137833][T10589] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 478.137863][T10589] [ 478.394755][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 479.482927][T10613] validate_nla: 55 callbacks suppressed [ 479.482946][T10613] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 480.369849][T10630] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 481.132373][T10634] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 482.924699][T10668] input: f¬ as /devices/virtual/input/input23 [ 483.377622][T10680] FAULT_INJECTION: forcing a failure. [ 483.377622][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 483.469095][T10680] CPU: 0 UID: 5 PID: 10680 Comm: syz.4.917 Not tainted syzkaller #0 PREEMPT(full) [ 483.469129][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.469144][T10680] Call Trace: [ 483.469151][T10680] [ 483.469161][T10680] dump_stack_lvl+0x16c/0x1f0 [ 483.469198][T10680] should_fail_ex+0x512/0x640 [ 483.469233][T10680] ? __kmalloc_noprof+0xbf/0x510 [ 483.469264][T10680] ? __list_lru_init+0xe8/0x4c0 [ 483.469290][T10680] should_failslab+0xc2/0x120 [ 483.469322][T10680] __kmalloc_noprof+0xd2/0x510 [ 483.469358][T10680] __list_lru_init+0xe8/0x4c0 [ 483.469388][T10680] alloc_super+0x8bf/0xbd0 [ 483.469421][T10680] sget_fc+0x116/0xc20 [ 483.469449][T10680] ? __pfx_set_anon_super_fc+0x10/0x10 [ 483.469475][T10680] ? __pfx_mqueue_fill_super+0x10/0x10 [ 483.469499][T10680] get_tree_nodev+0x28/0x190 [ 483.469542][T10680] mqueue_get_tree+0xf1/0x130 [ 483.469564][T10680] vfs_get_tree+0x8b/0x340 [ 483.469585][T10680] fc_mount_longterm+0x18/0x160 [ 483.469624][T10680] mq_init_ns+0x426/0x620 [ 483.469653][T10680] copy_ipcs+0x383/0x610 [ 483.469678][T10680] ? copy_utsname+0xab/0x470 [ 483.469713][T10680] create_new_namespaces+0x20a/0xa90 [ 483.469781][T10680] ? security_capable+0x7e/0x260 [ 483.469806][T10680] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 483.469835][T10680] ksys_unshare+0x45b/0xa40 [ 483.469866][T10680] ? __pfx_ksys_unshare+0x10/0x10 [ 483.469898][T10680] ? xfd_validate_state+0x61/0x180 [ 483.469939][T10680] __x64_sys_unshare+0x31/0x40 [ 483.469970][T10680] do_syscall_64+0xcd/0x490 [ 483.470003][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.470025][T10680] RIP: 0033:0x7f80e798ebe9 [ 483.470042][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.470063][T10680] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 483.470084][T10680] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 483.470098][T10680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 483.470111][T10680] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 483.470125][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.470137][T10680] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 483.470176][T10680] [ 484.073490][T10691] openvswitch: netlink: Multiple metadata blocks provided [ 484.586989][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.919'. [ 484.641534][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.657039][T10691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.680292][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.734712][T10691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.211417][T10753] Invalid ELF header magic: != ELF [ 489.406181][T10796] FAULT_INJECTION: forcing a failure. [ 489.406181][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 489.587667][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.1.951 Not tainted syzkaller #0 PREEMPT(full) [ 489.587697][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.587711][T10796] Call Trace: [ 489.587718][T10796] [ 489.587726][T10796] dump_stack_lvl+0x16c/0x1f0 [ 489.587761][T10796] should_fail_ex+0x512/0x640 [ 489.587793][T10796] ? __kmalloc_noprof+0xbf/0x510 [ 489.587821][T10796] ? vhost_dev_set_owner+0x20c/0xa50 [ 489.587842][T10796] should_failslab+0xc2/0x120 [ 489.587871][T10796] __kmalloc_noprof+0xd2/0x510 [ 489.587904][T10796] vhost_dev_set_owner+0x20c/0xa50 [ 489.587934][T10796] vhost_dev_ioctl+0x2eb/0xe20 [ 489.587954][T10796] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.587992][T10796] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 489.588023][T10796] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 489.588072][T10796] ? hook_file_ioctl_common+0x145/0x410 [ 489.588123][T10796] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 489.588164][T10796] ? __fget_files+0x20e/0x3c0 [ 489.588201][T10796] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 489.588242][T10796] __x64_sys_ioctl+0x18e/0x210 [ 489.588285][T10796] do_syscall_64+0xcd/0x490 [ 489.588321][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.588363][T10796] RIP: 0033:0x7f941a38ebe9 [ 489.588382][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.588406][T10796] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.588429][T10796] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 489.588445][T10796] RDX: 0000000000000003 RSI: 000000000000af01 RDI: 0000000000000003 [ 489.588459][T10796] RBP: 00007f941a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 489.588474][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.588489][T10796] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 489.588519][T10796] [ 492.672193][T10861] FAULT_INJECTION: forcing a failure. [ 492.672193][T10861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.847215][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.5.957 Not tainted syzkaller #0 PREEMPT(full) [ 492.847245][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.847276][T10861] Call Trace: [ 492.847284][T10861] [ 492.847292][T10861] dump_stack_lvl+0x16c/0x1f0 [ 492.847329][T10861] should_fail_ex+0x512/0x640 [ 492.847367][T10861] should_fail_alloc_page+0xe7/0x130 [ 492.847402][T10861] prepare_alloc_pages+0x3c2/0x610 [ 492.847443][T10861] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 492.847476][T10861] ? rcu_is_watching+0x12/0xc0 [ 492.847501][T10861] ? trace_mm_page_alloc+0x11f/0x1a0 [ 492.847539][T10861] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 492.847568][T10861] ? stack_depot_save_flags+0x29/0x9c0 [ 492.847605][T10861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.847637][T10861] ? kasan_save_stack+0x42/0x60 [ 492.847666][T10861] ? kasan_save_stack+0x33/0x60 [ 492.847693][T10861] ? kasan_save_track+0x14/0x30 [ 492.847719][T10861] ? __kasan_kmalloc+0xaa/0xb0 [ 492.847744][T10861] ? __kmalloc_noprof+0x223/0x510 [ 492.847782][T10861] ? vhost_dev_set_owner+0x287/0xa50 [ 492.847804][T10861] ? vhost_dev_ioctl+0x2eb/0xe20 [ 492.847855][T10861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.847895][T10861] ? policy_nodemask+0xea/0x4e0 [ 492.847931][T10861] alloc_pages_mpol+0x1fb/0x550 [ 492.847966][T10861] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 492.848007][T10861] ? find_held_lock+0x2b/0x80 [ 492.848033][T10861] ? vhost_dev_set_owner+0x191/0xa50 [ 492.848058][T10861] ___kmalloc_large_node+0xed/0x160 [ 492.848100][T10861] ? vhost_dev_set_owner+0x191/0xa50 [ 492.848122][T10861] __kmalloc_large_node_noprof+0x1c/0x70 [ 492.848164][T10861] __kmalloc_noprof.cold+0xc/0x61 [ 492.848201][T10861] ? rcu_is_watching+0x12/0xc0 [ 492.848230][T10861] vhost_dev_set_owner+0x191/0xa50 [ 492.848263][T10861] vhost_dev_ioctl+0x2eb/0xe20 [ 492.848288][T10861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.848329][T10861] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 492.848364][T10861] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 492.848402][T10861] ? hook_file_ioctl_common+0x145/0x410 [ 492.848437][T10861] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 492.848479][T10861] ? __fget_files+0x20e/0x3c0 [ 492.848510][T10861] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 492.848552][T10861] __x64_sys_ioctl+0x18e/0x210 [ 492.848594][T10861] do_syscall_64+0xcd/0x490 [ 492.848631][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.848656][T10861] RIP: 0033:0x7fa079d8ebe9 [ 492.848674][T10861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.848699][T10861] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.848722][T10861] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 492.848738][T10861] RDX: 0000000000000003 RSI: 000000000000af01 RDI: 0000000000000003 [ 492.848753][T10861] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 492.848768][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.848782][T10861] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 492.848812][T10861] [ 493.406044][T10878] FAULT_INJECTION: forcing a failure. [ 493.406044][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 493.419786][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) [ 493.419816][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.419829][T10878] Call Trace: [ 493.419837][T10878] [ 493.419845][T10878] dump_stack_lvl+0x16c/0x1f0 [ 493.419891][T10878] should_fail_ex+0x512/0x640 [ 493.419919][T10878] ? fs_reclaim_acquire+0xae/0x150 [ 493.419960][T10878] ? tomoyo_encode2+0x100/0x3e0 [ 493.419990][T10878] should_failslab+0xc2/0x120 [ 493.420019][T10878] __kmalloc_noprof+0xd2/0x510 [ 493.420051][T10878] tomoyo_encode2+0x100/0x3e0 [ 493.420086][T10878] tomoyo_encode+0x29/0x50 [ 493.420115][T10878] tomoyo_realpath_from_path+0x18f/0x6e0 [ 493.420150][T10878] ? tomoyo_profile+0x47/0x60 [ 493.420172][T10878] tomoyo_path_number_perm+0x245/0x580 [ 493.420197][T10878] ? tomoyo_path_number_perm+0x237/0x580 [ 493.420226][T10878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.420255][T10878] ? find_held_lock+0x2b/0x80 [ 493.420318][T10878] ? find_held_lock+0x2b/0x80 [ 493.420340][T10878] ? hook_file_ioctl_common+0x145/0x410 [ 493.420377][T10878] ? __fget_files+0x20e/0x3c0 [ 493.420407][T10878] security_file_ioctl+0x9b/0x240 [ 493.420439][T10878] __x64_sys_ioctl+0xb7/0x210 [ 493.420478][T10878] do_syscall_64+0xcd/0x490 [ 493.420523][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.420546][T10878] RIP: 0033:0x7f941a38ebe9 [ 493.420562][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.420583][T10878] RSP: 002b:00007f941b1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.420603][T10878] RAX: ffffffffffffffda RBX: 00007f941a5c6090 RCX: 00007f941a38ebe9 [ 493.420617][T10878] RDX: 0000000000000024 RSI: 00000000000089f0 RDI: 0000000000000003 [ 493.420648][T10878] RBP: 00007f941b1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 493.420662][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.420675][T10878] R13: 00007f941a5c6128 R14: 00007f941a5c6090 R15: 00007ffd74aba4b8 [ 493.420705][T10878] [ 493.420721][T10878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.978537][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 497.639508][T10938] sg_write: data in/out 2359516/96 bytes for SCSI command 0x0-- guessing data in; [ 497.639508][T10938] program syz.2.982 not setting count and/or reply_len properly [ 497.725509][T10935] FAULT_INJECTION: forcing a failure. [ 497.725509][T10935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.835704][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.4.973 Not tainted syzkaller #0 PREEMPT(full) [ 497.835732][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.835745][T10935] Call Trace: [ 497.835751][T10935] [ 497.835762][T10935] dump_stack_lvl+0x16c/0x1f0 [ 497.835795][T10935] should_fail_ex+0x512/0x640 [ 497.835829][T10935] should_fail_alloc_page+0xe7/0x130 [ 497.835860][T10935] prepare_alloc_pages+0x3c2/0x610 [ 497.835896][T10935] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 497.835925][T10935] ? rcu_is_watching+0x12/0xc0 [ 497.835946][T10935] ? trace_mm_page_alloc+0x11f/0x1a0 [ 497.835979][T10935] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 497.836005][T10935] ? stack_depot_save_flags+0x29/0x9c0 [ 497.836056][T10935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 497.836086][T10935] ? kasan_save_stack+0x42/0x60 [ 497.836109][T10935] ? kasan_save_stack+0x33/0x60 [ 497.836133][T10935] ? kasan_save_track+0x14/0x30 [ 497.836158][T10935] ? __kasan_kmalloc+0xaa/0xb0 [ 497.836181][T10935] ? __kmalloc_noprof+0x223/0x510 [ 497.836205][T10935] ? vhost_dev_set_owner+0x287/0xa50 [ 497.836225][T10935] ? vhost_dev_ioctl+0x2eb/0xe20 [ 497.836255][T10935] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.836291][T10935] ? policy_nodemask+0xea/0x4e0 [ 497.836323][T10935] alloc_pages_mpol+0x1fb/0x550 [ 497.836354][T10935] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 497.836387][T10935] ? find_held_lock+0x2b/0x80 [ 497.836411][T10935] ? vhost_dev_set_owner+0x191/0xa50 [ 497.836430][T10935] ___kmalloc_large_node+0xed/0x160 [ 497.836472][T10935] ? vhost_dev_set_owner+0x191/0xa50 [ 497.836492][T10935] __kmalloc_large_node_noprof+0x1c/0x70 [ 497.836530][T10935] __kmalloc_noprof.cold+0xc/0x61 [ 497.836564][T10935] ? rcu_is_watching+0x12/0xc0 [ 497.836590][T10935] vhost_dev_set_owner+0x191/0xa50 [ 497.836620][T10935] vhost_dev_ioctl+0x2eb/0xe20 [ 497.836640][T10935] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.836677][T10935] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 497.836708][T10935] vhost_vsock_dev_ioctl+0x3a5/0xb30 [ 497.836743][T10935] ? hook_file_ioctl_common+0x145/0x410 [ 497.836774][T10935] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 497.836812][T10935] ? __fget_files+0x20e/0x3c0 [ 497.836840][T10935] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 497.836877][T10935] __x64_sys_ioctl+0x18e/0x210 [ 497.836915][T10935] do_syscall_64+0xcd/0x490 [ 497.836948][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.836970][T10935] RIP: 0033:0x7f80e798ebe9 [ 497.836987][T10935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.837009][T10935] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.837029][T10935] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 497.837044][T10935] RDX: 0000000000000003 RSI: 000000000000af01 RDI: 0000000000000003 [ 497.837057][T10935] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 497.837070][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.837084][T10935] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 497.837111][T10935] [ 501.383104][T11003] FAULT_INJECTION: forcing a failure. [ 501.383104][T11003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 501.468439][T11003] CPU: 0 UID: 0 PID: 11003 Comm: syz.1.993 Not tainted syzkaller #0 PREEMPT(full) [ 501.468470][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.468485][T11003] Call Trace: [ 501.468493][T11003] [ 501.468502][T11003] dump_stack_lvl+0x16c/0x1f0 [ 501.468538][T11003] should_fail_ex+0x512/0x640 [ 501.468574][T11003] should_fail_alloc_page+0xe7/0x130 [ 501.468607][T11003] prepare_alloc_pages+0x3c2/0x610 [ 501.468641][T11003] ? lock_acquire+0x179/0x350 [ 501.468674][T11003] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 501.468704][T11003] ? mark_held_locks+0x49/0x80 [ 501.468732][T11003] ? finish_task_switch.isra.0+0x221/0xc10 [ 501.468755][T11003] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.468785][T11003] ? finish_task_switch.isra.0+0x221/0xc10 [ 501.468809][T11003] ? rcu_is_watching+0x12/0xc0 [ 501.468832][T11003] ? trace_sched_exit_tp+0xd1/0x120 [ 501.468868][T11003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 501.468915][T11003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 501.468952][T11003] ? policy_nodemask+0xea/0x4e0 [ 501.468984][T11003] alloc_pages_mpol+0x1fb/0x550 [ 501.469015][T11003] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 501.469048][T11003] ? __lock_acquire+0x62e/0x1ce0 [ 501.469080][T11003] folio_alloc_mpol_noprof+0x36/0x2f0 [ 501.469117][T11003] shmem_alloc_folio+0x135/0x160 [ 501.469155][T11003] shmem_alloc_and_add_folio+0x499/0xc20 [ 501.469188][T11003] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 501.469223][T11003] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 501.469257][T11003] shmem_get_folio_gfp+0x67f/0x1600 [ 501.469292][T11003] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 501.469323][T11003] ? filemap_map_pages+0xf58/0x1670 [ 501.469356][T11003] shmem_fault+0x1fe/0xa30 [ 501.469386][T11003] ? __pfx_shmem_fault+0x10/0x10 [ 501.469418][T11003] ? __pfx_filemap_map_pages+0x10/0x10 [ 501.469456][T11003] ? __pfx_filemap_map_pages+0x10/0x10 [ 501.469488][T11003] __do_fault+0x10d/0x490 [ 501.469520][T11003] ? __pfx_filemap_map_pages+0x10/0x10 [ 501.469548][T11003] do_pte_missing+0xf50/0x3ba0 [ 501.469573][T11003] ? find_held_lock+0x2b/0x80 [ 501.469596][T11003] ? __handle_mm_fault+0x14fd/0x2a50 [ 501.469625][T11003] __handle_mm_fault+0x152a/0x2a50 [ 501.469654][T11003] ? mt_find+0x3ef/0xa30 [ 501.469702][T11003] ? __pfx___handle_mm_fault+0x10/0x10 [ 501.469724][T11003] ? __pfx_mt_find+0x10/0x10 [ 501.469774][T11003] ? find_vma+0xbf/0x140 [ 501.469804][T11003] ? __pfx_find_vma+0x10/0x10 [ 501.469838][T11003] handle_mm_fault+0x589/0xd10 [ 501.469863][T11003] ? __bpf_trace_exceptions+0x1/0x40 [ 501.469901][T11003] do_user_addr_fault+0x7a6/0x1370 [ 501.469941][T11003] ? rcu_is_watching+0x12/0xc0 [ 501.469968][T11003] exc_page_fault+0x5c/0xb0 [ 501.469998][T11003] asm_exc_page_fault+0x26/0x30 [ 501.470020][T11003] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 501.470045][T11003] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 501.470068][T11003] RSP: 0018:ffffc9000b177a40 EFLAGS: 00050212 [ 501.470086][T11003] RAX: 0000000000000001 RBX: 0000000000100005 RCX: 0000000000000034 [ 501.470100][T11003] RDX: fffff5200162ef58 RSI: 0000000000100005 RDI: ffffc9000b177a90 [ 501.470115][T11003] RBP: 0000000000000034 R08: 0000000000000001 R09: fffff5200162ef58 [ 501.470129][T11003] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 501.470143][T11003] R13: ffffc9000b177a90 R14: 0000000000100005 R15: dffffc0000000000 [ 501.470172][T11003] _copy_from_user+0x98/0xd0 [ 501.470211][T11003] ip_tunnel_parm_from_user+0xa3/0x390 [ 501.470253][T11003] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 501.470297][T11003] ? __lock_acquire+0xb97/0x1ce0 [ 501.470333][T11003] ip_tunnel_siocdevprivate+0x99/0x1b0 [ 501.470372][T11003] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 501.470408][T11003] ? __mutex_trylock_common+0xe9/0x250 [ 501.470444][T11003] ? full_name_hash+0xbc/0x110 [ 501.470479][T11003] ? netdev_name_node_lookup+0x127/0x180 [ 501.470510][T11003] dev_ifsioc+0x8eb/0x1ee0 [ 501.470543][T11003] ? __pfx_dev_ifsioc+0x10/0x10 [ 501.470573][T11003] ? __pfx___mutex_lock+0x10/0x10 [ 501.470615][T11003] ? dev_load+0x8e/0x240 [ 501.470649][T11003] dev_ioctl+0x1b2/0x1060 [ 501.470680][T11003] sock_ioctl+0x5b3/0x6b0 [ 501.470705][T11003] ? __pfx_sock_ioctl+0x10/0x10 [ 501.470726][T11003] ? hook_file_ioctl_common+0x145/0x410 [ 501.470764][T11003] ? __fget_files+0x20e/0x3c0 [ 501.470794][T11003] ? __pfx_sock_ioctl+0x10/0x10 [ 501.470818][T11003] __x64_sys_ioctl+0x18e/0x210 [ 501.470858][T11003] do_syscall_64+0xcd/0x490 [ 501.470892][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.470915][T11003] RIP: 0033:0x7f941a38ebe9 [ 501.470932][T11003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.470954][T11003] RSP: 002b:00007f941b1cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.470974][T11003] RAX: ffffffffffffffda RBX: 00007f941a5c6090 RCX: 00007f941a38ebe9 [ 501.470989][T11003] RDX: 0000000000000024 RSI: 00000000000089f0 RDI: 0000000000000003 [ 501.471003][T11003] RBP: 00007f941b1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 501.471016][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.471030][T11003] R13: 00007f941a5c6128 R14: 00007f941a5c6090 R15: 00007ffd74aba4b8 [ 501.471059][T11003] [ 502.796919][T11012] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.954240][T11016] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 505.189106][T11067] nbd: couldn't find device at index 137 [ 505.303761][T11063] sg_write: data in/out 2359516/96 bytes for SCSI command 0x0-- guessing data in; [ 505.303761][T11063] program syz.4.1008 not setting count and/or reply_len properly [ 505.424285][T11069] random: crng reseeded on system resumption [ 506.598882][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.607974][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.148446][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 507.758546][ T30] audit: type=1800 audit(4294967300.499:7): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1025" name="lu_gp_id" dev="configfs" ino=34888 res=0 errno=0 [ 507.778922][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.922708][T11117] blktrace: Concurrent blktraces are not allowed on ram7 [ 508.288900][T11127] : renamed from gre0 (while UP) [ 508.866352][T11135] FAULT_INJECTION: forcing a failure. [ 508.866352][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 508.920247][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.4.1032 Not tainted syzkaller #0 PREEMPT(full) [ 508.920277][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.920291][T11135] Call Trace: [ 508.920298][T11135] [ 508.920306][T11135] dump_stack_lvl+0x16c/0x1f0 [ 508.920340][T11135] should_fail_ex+0x512/0x640 [ 508.920371][T11135] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 508.920401][T11135] should_failslab+0xc2/0x120 [ 508.920431][T11135] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 508.920457][T11135] ? rcu_is_watching+0x12/0xc0 [ 508.920487][T11135] ? key_alloc+0x3e0/0x1330 [ 508.920520][T11135] key_alloc+0x3e0/0x1330 [ 508.920556][T11135] ? trace_kmalloc+0x2b/0xd0 [ 508.920586][T11135] ? __kmalloc_noprof+0x242/0x510 [ 508.920612][T11135] ? __pfx_key_alloc+0x10/0x10 [ 508.920642][T11135] ? aa_get_newest_label+0xd2/0x250 [ 508.920671][T11135] keyring_alloc+0x44/0xc0 [ 508.920706][T11135] lookup_user_key+0xa3f/0x1300 [ 508.920738][T11135] ? __pfx_lookup_user_key+0x10/0x10 [ 508.920767][T11135] ? find_held_lock+0x2b/0x80 [ 508.920787][T11135] ? putname+0x154/0x1a0 [ 508.920817][T11135] ? do_sys_openat2+0x1b0/0x1d0 [ 508.920863][T11135] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 508.920900][T11135] keyctl_setperm_key+0x9d/0x3a0 [ 508.920922][T11135] ? __pfx_keyctl_setperm_key+0x10/0x10 [ 508.920945][T11135] ? xfd_validate_state+0x61/0x180 [ 508.920980][T11135] __do_sys_keyctl+0x29a/0x590 [ 508.921004][T11135] do_syscall_64+0xcd/0x490 [ 508.921034][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.921055][T11135] RIP: 0033:0x7f80e798ebe9 [ 508.921070][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.921091][T11135] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 508.921110][T11135] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 508.921124][T11135] RDX: 0000000000000107 RSI: ffffeffffffffffe RDI: 0000000000000005 [ 508.921137][T11135] RBP: 00007f80e7a11e19 R08: 000800000000000c R09: 0000000000000000 [ 508.921149][T11135] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000000 [ 508.921162][T11135] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 508.921188][T11135] [ 509.148516][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.440856][T11163] binder: 11161:11163 ioctl c0306201 0 returned -14 [ 510.451055][T11162] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 510.748690][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 511.490039][T11184] FAULT_INJECTION: forcing a failure. [ 511.490039][T11184] name failslab, interval 1, probability 0, space 0, times 0 [ 511.545698][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.1.1046 Not tainted syzkaller #0 PREEMPT(full) [ 511.545732][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.545747][T11184] Call Trace: [ 511.545755][T11184] [ 511.545764][T11184] dump_stack_lvl+0x16c/0x1f0 [ 511.545802][T11184] should_fail_ex+0x512/0x640 [ 511.545836][T11184] ? __kmalloc_noprof+0xbf/0x510 [ 511.545867][T11184] ? __list_lru_init+0xe8/0x4c0 [ 511.545897][T11184] should_failslab+0xc2/0x120 [ 511.545930][T11184] __kmalloc_noprof+0xd2/0x510 [ 511.545958][T11184] ? lockdep_init_map_type+0x5c/0x280 [ 511.545998][T11184] __list_lru_init+0xe8/0x4c0 [ 511.546028][T11184] alloc_super+0x904/0xbd0 [ 511.546061][T11184] sget_fc+0x116/0xc20 [ 511.546088][T11184] ? __pfx_set_anon_super_fc+0x10/0x10 [ 511.546129][T11184] ? __pfx_mqueue_fill_super+0x10/0x10 [ 511.546153][T11184] get_tree_nodev+0x28/0x190 [ 511.546183][T11184] mqueue_get_tree+0xf1/0x130 [ 511.546206][T11184] vfs_get_tree+0x8b/0x340 [ 511.546234][T11184] fc_mount_longterm+0x18/0x160 [ 511.546275][T11184] mq_init_ns+0x426/0x620 [ 511.546310][T11184] copy_ipcs+0x383/0x610 [ 511.546336][T11184] ? copy_utsname+0xab/0x470 [ 511.546374][T11184] create_new_namespaces+0x20a/0xa90 [ 511.546403][T11184] ? security_capable+0x7e/0x260 [ 511.546430][T11184] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 511.546462][T11184] ksys_unshare+0x45b/0xa40 [ 511.546497][T11184] ? __pfx_ksys_unshare+0x10/0x10 [ 511.546532][T11184] ? xfd_validate_state+0x61/0x180 [ 511.546578][T11184] __x64_sys_unshare+0x31/0x40 [ 511.546612][T11184] do_syscall_64+0xcd/0x490 [ 511.546649][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.546674][T11184] RIP: 0033:0x7f941a38ebe9 [ 511.546693][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.546718][T11184] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 511.546740][T11184] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 511.546757][T11184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 511.546771][T11184] RBP: 00007f941a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 511.546786][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.546801][T11184] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 511.546831][T11184] [ 513.291092][T11214] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 514.051205][T11224] FAULT_INJECTION: forcing a failure. [ 514.051205][T11224] name failslab, interval 1, probability 0, space 0, times 0 [ 514.109406][T11224] CPU: 0 UID: 0 PID: 11224 Comm: syz.5.1055 Not tainted syzkaller #0 PREEMPT(full) [ 514.109439][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.109454][T11224] Call Trace: [ 514.109462][T11224] [ 514.109470][T11224] dump_stack_lvl+0x16c/0x1f0 [ 514.109508][T11224] should_fail_ex+0x512/0x640 [ 514.109543][T11224] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 514.109585][T11224] should_failslab+0xc2/0x120 [ 514.109615][T11224] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 514.109642][T11224] ? rcu_is_watching+0x12/0xc0 [ 514.109664][T11224] ? key_alloc+0x3e0/0x1330 [ 514.109697][T11224] key_alloc+0x3e0/0x1330 [ 514.109732][T11224] ? trace_kmalloc+0x2b/0xd0 [ 514.109772][T11224] ? __kmalloc_noprof+0x242/0x510 [ 514.109814][T11224] ? __pfx_key_alloc+0x10/0x10 [ 514.109844][T11224] ? aa_get_newest_label+0xd2/0x250 [ 514.109872][T11224] keyring_alloc+0x44/0xc0 [ 514.109908][T11224] lookup_user_key+0xa3f/0x1300 [ 514.109939][T11224] ? __pfx_lookup_user_key+0x10/0x10 [ 514.109966][T11224] ? find_held_lock+0x2b/0x80 [ 514.109986][T11224] ? putname+0x154/0x1a0 [ 514.110016][T11224] ? do_sys_openat2+0x1b0/0x1d0 [ 514.110063][T11224] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 514.110104][T11224] keyctl_setperm_key+0x9d/0x3a0 [ 514.110129][T11224] ? __pfx_keyctl_setperm_key+0x10/0x10 [ 514.110153][T11224] ? xfd_validate_state+0x61/0x180 [ 514.110193][T11224] __do_sys_keyctl+0x29a/0x590 [ 514.110218][T11224] do_syscall_64+0xcd/0x490 [ 514.110252][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.110274][T11224] RIP: 0033:0x7fa079d8ebe9 [ 514.110291][T11224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.110312][T11224] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 514.110333][T11224] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 514.110347][T11224] RDX: 0000000000000107 RSI: ffffeffffffffffe RDI: 0000000000000005 [ 514.110361][T11224] RBP: 00007fa079e11e19 R08: 000800000000000c R09: 0000000000000000 [ 514.110375][T11224] R10: 0000000000000803 R11: 0000000000000246 R12: 0000000000000000 [ 514.110389][T11224] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 514.110416][T11224] [ 514.399505][T11228] FAULT_INJECTION: forcing a failure. [ 514.399505][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 514.412221][T11228] CPU: 0 UID: 0 PID: 11228 Comm: syz.2.1057 Not tainted syzkaller #0 PREEMPT(full) [ 514.412253][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.412267][T11228] Call Trace: [ 514.412276][T11228] [ 514.412285][T11228] dump_stack_lvl+0x16c/0x1f0 [ 514.412322][T11228] should_fail_ex+0x512/0x640 [ 514.412356][T11228] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 514.412385][T11228] should_failslab+0xc2/0x120 [ 514.412417][T11228] __kmalloc_cache_noprof+0x6a/0x3e0 [ 514.412442][T11228] ? shrinker_alloc+0xf5/0xbf0 [ 514.412477][T11228] shrinker_alloc+0xf5/0xbf0 [ 514.412509][T11228] ? mark_held_locks+0x49/0x80 [ 514.412540][T11228] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 514.412573][T11228] ? __pfx_shrinker_alloc+0x10/0x10 [ 514.412609][T11228] ? lockdep_init_map_type+0x5c/0x280 [ 514.412642][T11228] ? __raw_spin_lock_init+0x3a/0x110 [ 514.412679][T11228] ? __init_rwsem+0x12d/0x1b0 [ 514.412717][T11228] alloc_super+0x7c8/0xbd0 [ 514.412749][T11228] sget_fc+0x116/0xc20 [ 514.412775][T11228] ? __pfx_set_anon_super_fc+0x10/0x10 [ 514.412801][T11228] ? __pfx_mqueue_fill_super+0x10/0x10 [ 514.412824][T11228] get_tree_nodev+0x28/0x190 [ 514.412852][T11228] mqueue_get_tree+0xf1/0x130 [ 514.412874][T11228] vfs_get_tree+0x8b/0x340 [ 514.412895][T11228] fc_mount_longterm+0x18/0x160 [ 514.412934][T11228] mq_init_ns+0x426/0x620 [ 514.412969][T11228] copy_ipcs+0x383/0x610 [ 514.412994][T11228] ? copy_utsname+0xab/0x470 [ 514.413034][T11228] create_new_namespaces+0x20a/0xa90 [ 514.413062][T11228] ? security_capable+0x7e/0x260 [ 514.413089][T11228] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 514.413119][T11228] ksys_unshare+0x45b/0xa40 [ 514.413153][T11228] ? __pfx_ksys_unshare+0x10/0x10 [ 514.413187][T11228] ? xfd_validate_state+0x61/0x180 [ 514.413232][T11228] __x64_sys_unshare+0x31/0x40 [ 514.413264][T11228] do_syscall_64+0xcd/0x490 [ 514.413300][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.413324][T11228] RIP: 0033:0x7f3062f8ebe9 [ 514.413343][T11228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.413366][T11228] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 514.413388][T11228] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 514.413404][T11228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 514.413418][T11228] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 514.413454][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.413468][T11228] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 514.413499][T11228] [ 514.802634][T11226] : renamed from gre0 (while UP) [ 516.432614][T11260] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 516.585077][T11265] FAULT_INJECTION: forcing a failure. [ 516.585077][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 516.633308][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.4.1067 Not tainted syzkaller #0 PREEMPT(full) [ 516.633342][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.633357][T11265] Call Trace: [ 516.633365][T11265] [ 516.633374][T11265] dump_stack_lvl+0x16c/0x1f0 [ 516.633411][T11265] should_fail_ex+0x512/0x640 [ 516.633447][T11265] ? __kmalloc_noprof+0xbf/0x510 [ 516.633478][T11265] ? __list_lru_init+0xe8/0x4c0 [ 516.633504][T11265] should_failslab+0xc2/0x120 [ 516.633537][T11265] __kmalloc_noprof+0xd2/0x510 [ 516.633565][T11265] ? lockdep_init_map_type+0x5c/0x280 [ 516.633604][T11265] __list_lru_init+0xe8/0x4c0 [ 516.633634][T11265] alloc_super+0x904/0xbd0 [ 516.633668][T11265] sget_fc+0x116/0xc20 [ 516.633695][T11265] ? __pfx_set_anon_super_fc+0x10/0x10 [ 516.633722][T11265] ? __pfx_mqueue_fill_super+0x10/0x10 [ 516.633745][T11265] get_tree_nodev+0x28/0x190 [ 516.633775][T11265] mqueue_get_tree+0xf1/0x130 [ 516.633807][T11265] vfs_get_tree+0x8b/0x340 [ 516.633829][T11265] fc_mount_longterm+0x18/0x160 [ 516.633870][T11265] mq_init_ns+0x426/0x620 [ 516.633900][T11265] copy_ipcs+0x383/0x610 [ 516.633926][T11265] ? copy_utsname+0xab/0x470 [ 516.633962][T11265] create_new_namespaces+0x20a/0xa90 [ 516.633990][T11265] ? security_capable+0x7e/0x260 [ 516.634031][T11265] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 516.634061][T11265] ksys_unshare+0x45b/0xa40 [ 516.634095][T11265] ? __pfx_ksys_unshare+0x10/0x10 [ 516.634129][T11265] ? xfd_validate_state+0x61/0x180 [ 516.634173][T11265] __x64_sys_unshare+0x31/0x40 [ 516.634205][T11265] do_syscall_64+0xcd/0x490 [ 516.634241][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.634265][T11265] RIP: 0033:0x7f80e798ebe9 [ 516.634295][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.634316][T11265] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 516.634338][T11265] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 516.634352][T11265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 516.634365][T11265] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 516.634379][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.634392][T11265] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 516.634437][T11265] [ 516.934833][T11267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 516.946364][T11267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 517.577312][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 517.616230][T11275] : renamed from gre0 (while UP) [ 518.918446][T11323] FAULT_INJECTION: forcing a failure. [ 518.918446][T11323] name failslab, interval 1, probability 0, space 0, times 0 [ 518.968844][T11323] CPU: 0 UID: 0 PID: 11323 Comm: syz.5.1077 Not tainted syzkaller #0 PREEMPT(full) [ 518.968877][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.968892][T11323] Call Trace: [ 518.968900][T11323] [ 518.968909][T11323] dump_stack_lvl+0x16c/0x1f0 [ 518.968947][T11323] should_fail_ex+0x512/0x640 [ 518.968983][T11323] ? __kmalloc_noprof+0xbf/0x510 [ 518.969015][T11323] ? __list_lru_init+0xe8/0x4c0 [ 518.969041][T11323] should_failslab+0xc2/0x120 [ 518.969073][T11323] __kmalloc_noprof+0xd2/0x510 [ 518.969102][T11323] ? lockdep_init_map_type+0x5c/0x280 [ 518.969142][T11323] __list_lru_init+0xe8/0x4c0 [ 518.969172][T11323] alloc_super+0x904/0xbd0 [ 518.969204][T11323] sget_fc+0x116/0xc20 [ 518.969231][T11323] ? __pfx_set_anon_super_fc+0x10/0x10 [ 518.969258][T11323] ? __pfx_mqueue_fill_super+0x10/0x10 [ 518.969281][T11323] get_tree_nodev+0x28/0x190 [ 518.969311][T11323] mqueue_get_tree+0xf1/0x130 [ 518.969334][T11323] vfs_get_tree+0x8b/0x340 [ 518.969356][T11323] fc_mount_longterm+0x18/0x160 [ 518.969396][T11323] mq_init_ns+0x426/0x620 [ 518.969427][T11323] copy_ipcs+0x383/0x610 [ 518.969453][T11323] ? copy_utsname+0xab/0x470 [ 518.969490][T11323] create_new_namespaces+0x20a/0xa90 [ 518.969518][T11323] ? security_capable+0x7e/0x260 [ 518.969558][T11323] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 518.969613][T11323] ksys_unshare+0x45b/0xa40 [ 518.969643][T11323] ? __pfx_ksys_unshare+0x10/0x10 [ 518.969673][T11323] ? xfd_validate_state+0x61/0x180 [ 518.969712][T11323] __x64_sys_unshare+0x31/0x40 [ 518.969741][T11323] do_syscall_64+0xcd/0x490 [ 518.969772][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.969793][T11323] RIP: 0033:0x7fa079d8ebe9 [ 518.969809][T11323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.969829][T11323] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 518.969849][T11323] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 518.969862][T11323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 518.969875][T11323] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 518.969887][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.969899][T11323] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 518.969925][T11323] [ 519.476617][ T8820] Bluetooth: hci2: command 0x0406 tx timeout [ 519.565842][T11332] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1080'. [ 519.687495][T11336] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 519.991060][T11343] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 521.583445][T11371] FAULT_INJECTION: forcing a failure. [ 521.583445][T11371] name failslab, interval 1, probability 0, space 0, times 0 [ 521.633448][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.2.1092 Not tainted syzkaller #0 PREEMPT(full) [ 521.633482][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.633496][T11371] Call Trace: [ 521.633504][T11371] [ 521.633512][T11371] dump_stack_lvl+0x16c/0x1f0 [ 521.633549][T11371] should_fail_ex+0x512/0x640 [ 521.633583][T11371] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 521.633612][T11371] should_failslab+0xc2/0x120 [ 521.633644][T11371] __kmalloc_cache_noprof+0x6a/0x3e0 [ 521.633668][T11371] ? shrinker_alloc+0xf5/0xbf0 [ 521.633702][T11371] shrinker_alloc+0xf5/0xbf0 [ 521.633735][T11371] ? mark_held_locks+0x49/0x80 [ 521.633766][T11371] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 521.633799][T11371] ? __pfx_shrinker_alloc+0x10/0x10 [ 521.633854][T11371] ? lockdep_init_map_type+0x5c/0x280 [ 521.633888][T11371] ? __raw_spin_lock_init+0x3a/0x110 [ 521.633926][T11371] ? __init_rwsem+0x12d/0x1b0 [ 521.633964][T11371] alloc_super+0x7c8/0xbd0 [ 521.633997][T11371] sget_fc+0x116/0xc20 [ 521.634024][T11371] ? __pfx_set_anon_super_fc+0x10/0x10 [ 521.634050][T11371] ? __pfx_mqueue_fill_super+0x10/0x10 [ 521.634073][T11371] get_tree_nodev+0x28/0x190 [ 521.634103][T11371] mqueue_get_tree+0xf1/0x130 [ 521.634126][T11371] vfs_get_tree+0x8b/0x340 [ 521.634148][T11371] fc_mount_longterm+0x18/0x160 [ 521.634188][T11371] mq_init_ns+0x426/0x620 [ 521.634218][T11371] copy_ipcs+0x383/0x610 [ 521.634244][T11371] ? copy_utsname+0xab/0x470 [ 521.634280][T11371] create_new_namespaces+0x20a/0xa90 [ 521.634309][T11371] ? security_capable+0x7e/0x260 [ 521.634337][T11371] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 521.634376][T11371] ksys_unshare+0x45b/0xa40 [ 521.634411][T11371] ? __pfx_ksys_unshare+0x10/0x10 [ 521.634446][T11371] ? xfd_validate_state+0x61/0x180 [ 521.634492][T11371] __x64_sys_unshare+0x31/0x40 [ 521.634526][T11371] do_syscall_64+0xcd/0x490 [ 521.634563][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.634587][T11371] RIP: 0033:0x7f3062f8ebe9 [ 521.634607][T11371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.634631][T11371] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 521.634653][T11371] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 521.634669][T11371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 521.634685][T11371] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 521.634699][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.634714][T11371] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 521.634744][T11371] [ 522.126335][T11380] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 522.666561][T11389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 523.398273][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'. [ 524.092430][T11402] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 524.149780][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1099'. [ 524.731888][T11414] FAULT_INJECTION: forcing a failure. [ 524.731888][T11414] name failslab, interval 1, probability 0, space 0, times 0 [ 524.804524][T11414] CPU: 0 UID: 0 PID: 11414 Comm: syz.2.1103 Not tainted syzkaller #0 PREEMPT(full) [ 524.804555][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.804569][T11414] Call Trace: [ 524.804576][T11414] [ 524.804584][T11414] dump_stack_lvl+0x16c/0x1f0 [ 524.804619][T11414] should_fail_ex+0x512/0x640 [ 524.804650][T11414] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 524.804676][T11414] should_failslab+0xc2/0x120 [ 524.804706][T11414] __kmalloc_cache_noprof+0x6a/0x3e0 [ 524.804729][T11414] ? shrinker_alloc+0xf5/0xbf0 [ 524.804762][T11414] shrinker_alloc+0xf5/0xbf0 [ 524.804792][T11414] ? mark_held_locks+0x49/0x80 [ 524.804820][T11414] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 524.804852][T11414] ? __pfx_shrinker_alloc+0x10/0x10 [ 524.804885][T11414] ? lockdep_init_map_type+0x5c/0x280 [ 524.804931][T11414] ? __raw_spin_lock_init+0x3a/0x110 [ 524.804965][T11414] ? __init_rwsem+0x12d/0x1b0 [ 524.805022][T11414] alloc_super+0x7c8/0xbd0 [ 524.805055][T11414] sget_fc+0x116/0xc20 [ 524.805087][T11414] ? __pfx_set_anon_super_fc+0x10/0x10 [ 524.805112][T11414] ? __pfx_mqueue_fill_super+0x10/0x10 [ 524.805135][T11414] get_tree_nodev+0x28/0x190 [ 524.805164][T11414] mqueue_get_tree+0xf1/0x130 [ 524.805186][T11414] vfs_get_tree+0x8b/0x340 [ 524.805207][T11414] fc_mount_longterm+0x18/0x160 [ 524.805246][T11414] mq_init_ns+0x426/0x620 [ 524.805275][T11414] copy_ipcs+0x383/0x610 [ 524.805301][T11414] ? copy_utsname+0xab/0x470 [ 524.805336][T11414] create_new_namespaces+0x20a/0xa90 [ 524.805363][T11414] ? security_capable+0x7e/0x260 [ 524.805390][T11414] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 524.805420][T11414] ksys_unshare+0x45b/0xa40 [ 524.805454][T11414] ? __pfx_ksys_unshare+0x10/0x10 [ 524.805488][T11414] ? xfd_validate_state+0x61/0x180 [ 524.805532][T11414] __x64_sys_unshare+0x31/0x40 [ 524.805565][T11414] do_syscall_64+0xcd/0x490 [ 524.805601][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.805626][T11414] RIP: 0033:0x7f3062f8ebe9 [ 524.805643][T11414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.805666][T11414] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.805688][T11414] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 524.805704][T11414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 524.805718][T11414] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 524.805732][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.805746][T11414] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 524.805775][T11414] [ 525.977999][T11424] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 526.746727][T11443] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 526.792746][T11443] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 531.330924][T11525] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 532.131203][T11551] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 532.653855][T11550] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 532.779669][T11550] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.582652][T11579] FAULT_INJECTION: forcing a failure. [ 533.582652][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 533.717300][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.4.1141 Not tainted syzkaller #0 PREEMPT(full) [ 533.717330][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.717345][T11579] Call Trace: [ 533.717351][T11579] [ 533.717360][T11579] dump_stack_lvl+0x16c/0x1f0 [ 533.717396][T11579] should_fail_ex+0x512/0x640 [ 533.717428][T11579] ? fs_reclaim_acquire+0xae/0x150 [ 533.717465][T11579] should_failslab+0xc2/0x120 [ 533.717495][T11579] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 533.717522][T11579] ? security_inode_alloc+0x3b/0x2b0 [ 533.717552][T11579] security_inode_alloc+0x3b/0x2b0 [ 533.717578][T11579] inode_init_always_gfp+0xce4/0x1030 [ 533.717607][T11579] ? __pfx_mqueue_fill_super+0x10/0x10 [ 533.717627][T11579] alloc_inode+0x86/0x240 [ 533.717660][T11579] new_inode+0x22/0x1c0 [ 533.717693][T11579] ? __pfx_mqueue_fill_super+0x10/0x10 [ 533.717730][T11579] mqueue_get_inode+0x2e/0xdd0 [ 533.717748][T11579] ? sget_fc+0x808/0xc20 [ 533.717774][T11579] ? __pfx_mqueue_fill_super+0x10/0x10 [ 533.717794][T11579] mqueue_fill_super+0x14d/0x260 [ 533.717815][T11579] get_tree_nodev+0xda/0x190 [ 533.717845][T11579] mqueue_get_tree+0xf1/0x130 [ 533.717865][T11579] vfs_get_tree+0x8b/0x340 [ 533.717885][T11579] fc_mount_longterm+0x18/0x160 [ 533.717921][T11579] mq_init_ns+0x426/0x620 [ 533.717949][T11579] copy_ipcs+0x383/0x610 [ 533.717972][T11579] ? copy_utsname+0xab/0x470 [ 533.718005][T11579] create_new_namespaces+0x20a/0xa90 [ 533.718030][T11579] ? security_capable+0x7e/0x260 [ 533.718055][T11579] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 533.718083][T11579] ksys_unshare+0x45b/0xa40 [ 533.718115][T11579] ? __pfx_ksys_unshare+0x10/0x10 [ 533.718147][T11579] ? xfd_validate_state+0x61/0x180 [ 533.718189][T11579] __x64_sys_unshare+0x31/0x40 [ 533.718219][T11579] do_syscall_64+0xcd/0x490 [ 533.718252][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.718279][T11579] RIP: 0033:0x7f80e798ebe9 [ 533.718320][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.718344][T11579] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 533.718388][T11579] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 533.718404][T11579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 533.718419][T11579] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 533.718434][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.718448][T11579] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 533.718490][T11579] [ 533.983794][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.436300][T11624] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 535.967316][T11640] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 536.066455][T11641] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 536.127350][T11642] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 538.638580][T11705] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1169'. [ 540.585015][T11755] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 541.697814][T11784] FAULT_INJECTION: forcing a failure. [ 541.697814][T11784] name failslab, interval 1, probability 0, space 0, times 0 [ 541.772935][T11784] CPU: 0 UID: 0 PID: 11784 Comm: syz.1.1190 Not tainted syzkaller #0 PREEMPT(full) [ 541.772974][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.773001][T11784] Call Trace: [ 541.773009][T11784] [ 541.773019][T11784] dump_stack_lvl+0x16c/0x1f0 [ 541.773056][T11784] should_fail_ex+0x512/0x640 [ 541.773090][T11784] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 541.773118][T11784] should_failslab+0xc2/0x120 [ 541.773170][T11784] __kmalloc_cache_noprof+0x6a/0x3e0 [ 541.773195][T11784] ? shrinker_alloc+0xf5/0xbf0 [ 541.773230][T11784] shrinker_alloc+0xf5/0xbf0 [ 541.773264][T11784] ? mark_held_locks+0x49/0x80 [ 541.773295][T11784] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 541.773330][T11784] ? __pfx_shrinker_alloc+0x10/0x10 [ 541.773366][T11784] ? lockdep_init_map_type+0x5c/0x280 [ 541.773401][T11784] ? __raw_spin_lock_init+0x3a/0x110 [ 541.773439][T11784] ? __init_rwsem+0x12d/0x1b0 [ 541.773478][T11784] alloc_super+0x7c8/0xbd0 [ 541.773511][T11784] sget_fc+0x116/0xc20 [ 541.773538][T11784] ? __pfx_set_anon_super_fc+0x10/0x10 [ 541.773565][T11784] ? __pfx_mqueue_fill_super+0x10/0x10 [ 541.773595][T11784] get_tree_nodev+0x28/0x190 [ 541.773625][T11784] mqueue_get_tree+0xf1/0x130 [ 541.773648][T11784] vfs_get_tree+0x8b/0x340 [ 541.773670][T11784] fc_mount_longterm+0x18/0x160 [ 541.773710][T11784] mq_init_ns+0x426/0x620 [ 541.773753][T11784] copy_ipcs+0x383/0x610 [ 541.773778][T11784] ? copy_utsname+0xab/0x470 [ 541.773813][T11784] create_new_namespaces+0x20a/0xa90 [ 541.773840][T11784] ? security_capable+0x7e/0x260 [ 541.773867][T11784] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 541.773898][T11784] ksys_unshare+0x45b/0xa40 [ 541.773931][T11784] ? __pfx_ksys_unshare+0x10/0x10 [ 541.773966][T11784] ? xfd_validate_state+0x61/0x180 [ 541.774009][T11784] __x64_sys_unshare+0x31/0x40 [ 541.774042][T11784] do_syscall_64+0xcd/0x490 [ 541.774078][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.774102][T11784] RIP: 0033:0x7f941a38ebe9 [ 541.774119][T11784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.774142][T11784] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 541.774164][T11784] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 541.774180][T11784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 541.774194][T11784] RBP: 00007f941a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 541.774208][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.774222][T11784] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 541.774251][T11784] [ 542.769962][T11808] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1195'. [ 542.832838][T11812] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 545.541842][T11883] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 547.761651][T11938] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 549.689819][T11977] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 552.013549][T12027] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 553.850467][T12069] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 556.026588][T12134] ovs_ÿþÿž: entered promiscuous mode [ 556.153263][T12133] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 556.969914][T12159] sg_write: data in/out 2359516/96 bytes for SCSI command 0x0-- guessing data in; [ 556.969914][T12159] program syz.1.1297 not setting count and/or reply_len properly [ 557.025375][T12161] FAULT_INJECTION: forcing a failure. [ 557.025375][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 557.082771][T12161] CPU: 0 UID: 0 PID: 12161 Comm: syz.5.1299 Not tainted syzkaller #0 PREEMPT(full) [ 557.082802][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.082819][T12161] Call Trace: [ 557.082827][T12161] [ 557.082835][T12161] dump_stack_lvl+0x16c/0x1f0 [ 557.082873][T12161] should_fail_ex+0x512/0x640 [ 557.082905][T12161] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 557.082935][T12161] should_failslab+0xc2/0x120 [ 557.082965][T12161] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 557.082993][T12161] ? create_new_namespaces+0x30/0xa90 [ 557.083023][T12161] create_new_namespaces+0x30/0xa90 [ 557.083048][T12161] ? bpf_lsm_capable+0x9/0x10 [ 557.083068][T12161] ? security_capable+0x7e/0x260 [ 557.083094][T12161] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 557.083123][T12161] ksys_unshare+0x45b/0xa40 [ 557.083155][T12161] ? __pfx_ksys_unshare+0x10/0x10 [ 557.083185][T12161] ? ksys_write+0x1ac/0x250 [ 557.083228][T12161] __x64_sys_unshare+0x31/0x40 [ 557.083260][T12161] do_syscall_64+0xcd/0x490 [ 557.083308][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.083332][T12161] RIP: 0033:0x7fa079d8ebe9 [ 557.083361][T12161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.083382][T12161] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 557.083419][T12161] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 557.083435][T12161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 557.083448][T12161] RBP: 00007fa07ab45090 R08: 0000000000000000 R09: 0000000000000000 [ 557.083463][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.083476][T12161] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 557.083504][T12161] [ 557.269528][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.707609][T12194] FAULT_INJECTION: forcing a failure. [ 558.707609][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 558.748845][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.4.1309 Not tainted syzkaller #0 PREEMPT(full) [ 558.748878][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.748892][T12194] Call Trace: [ 558.748900][T12194] [ 558.748909][T12194] dump_stack_lvl+0x16c/0x1f0 [ 558.748946][T12194] should_fail_ex+0x512/0x640 [ 558.748980][T12194] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 558.749008][T12194] should_failslab+0xc2/0x120 [ 558.749040][T12194] __kmalloc_cache_noprof+0x6a/0x3e0 [ 558.749065][T12194] ? copy_ipcs+0x19f/0x610 [ 558.749104][T12194] copy_ipcs+0x19f/0x610 [ 558.749129][T12194] ? copy_utsname+0xab/0x470 [ 558.749166][T12194] create_new_namespaces+0x20a/0xa90 [ 558.749194][T12194] ? security_capable+0x7e/0x260 [ 558.749222][T12194] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 558.749252][T12194] ksys_unshare+0x45b/0xa40 [ 558.749289][T12194] ? __pfx_ksys_unshare+0x10/0x10 [ 558.749323][T12194] ? ksys_write+0x1ac/0x250 [ 558.749361][T12194] __x64_sys_unshare+0x31/0x40 [ 558.749394][T12194] do_syscall_64+0xcd/0x490 [ 558.749430][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.749454][T12194] RIP: 0033:0x7f80e798ebe9 [ 558.749476][T12194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.749513][T12194] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.749534][T12194] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 558.749561][T12194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 558.749574][T12194] RBP: 00007f80e8795090 R08: 0000000000000000 R09: 0000000000000000 [ 558.749587][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.749599][T12194] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 558.749625][T12194] [ 558.933642][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.032271][T12198] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 559.368504][T12205] FAULT_INJECTION: forcing a failure. [ 559.368504][T12205] name failslab, interval 1, probability 0, space 0, times 0 [ 559.413855][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.4.1313 Not tainted syzkaller #0 PREEMPT(full) [ 559.413885][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.413900][T12205] Call Trace: [ 559.413906][T12205] [ 559.413915][T12205] dump_stack_lvl+0x16c/0x1f0 [ 559.413950][T12205] should_fail_ex+0x512/0x640 [ 559.413988][T12205] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 559.414014][T12205] should_failslab+0xc2/0x120 [ 559.414044][T12205] __kmalloc_cache_noprof+0x6a/0x3e0 [ 559.414067][T12205] ? shrinker_alloc+0xf5/0xbf0 [ 559.414099][T12205] shrinker_alloc+0xf5/0xbf0 [ 559.414129][T12205] ? mark_held_locks+0x49/0x80 [ 559.414159][T12205] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 559.414190][T12205] ? __pfx_shrinker_alloc+0x10/0x10 [ 559.414223][T12205] ? lockdep_init_map_type+0x5c/0x280 [ 559.414254][T12205] ? __raw_spin_lock_init+0x3a/0x110 [ 559.414289][T12205] ? __init_rwsem+0x12d/0x1b0 [ 559.414324][T12205] alloc_super+0x7c8/0xbd0 [ 559.414353][T12205] sget_fc+0x116/0xc20 [ 559.414378][T12205] ? __pfx_set_anon_super_fc+0x10/0x10 [ 559.414402][T12205] ? __pfx_mqueue_fill_super+0x10/0x10 [ 559.414422][T12205] get_tree_nodev+0x28/0x190 [ 559.414449][T12205] mqueue_get_tree+0xf1/0x130 [ 559.414469][T12205] vfs_get_tree+0x8b/0x340 [ 559.414493][T12205] fc_mount_longterm+0x18/0x160 [ 559.414529][T12205] mq_init_ns+0x426/0x620 [ 559.414557][T12205] copy_ipcs+0x383/0x610 [ 559.414580][T12205] ? copy_utsname+0xab/0x470 [ 559.414613][T12205] create_new_namespaces+0x20a/0xa90 [ 559.414639][T12205] ? security_capable+0x7e/0x260 [ 559.414664][T12205] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 559.414692][T12205] ksys_unshare+0x45b/0xa40 [ 559.414724][T12205] ? __pfx_ksys_unshare+0x10/0x10 [ 559.414755][T12205] ? xfd_validate_state+0x61/0x180 [ 559.414796][T12205] __x64_sys_unshare+0x31/0x40 [ 559.414844][T12205] do_syscall_64+0xcd/0x490 [ 559.414880][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.414905][T12205] RIP: 0033:0x7f80e798ebe9 [ 559.414923][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.414946][T12205] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 559.414968][T12205] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 559.414990][T12205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 559.415004][T12205] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.415018][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.415032][T12205] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 559.415062][T12205] [ 559.682521][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.034700][T12211] Console: switching to colour frame buffer device 128x48 [ 560.150034][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'. [ 560.160749][T12207] bridge_slave_1: left allmulticast mode [ 560.167569][T12207] bridge_slave_1: left promiscuous mode [ 560.175500][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.186519][T12207] bridge_slave_0: left allmulticast mode [ 560.192463][T12207] bridge_slave_0: left promiscuous mode [ 560.199944][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.252365][T12242] tipc: Started in network mode [ 561.269845][T12242] tipc: Node identity ee00, cluster identity 4711 [ 561.293852][T12242] tipc: Node number set to 60928 [ 561.541154][T12250] FAULT_INJECTION: forcing a failure. [ 561.541154][T12250] name failslab, interval 1, probability 0, space 0, times 0 [ 561.575603][T12250] CPU: 0 UID: 0 PID: 12250 Comm: syz.1.1324 Not tainted syzkaller #0 PREEMPT(full) [ 561.575632][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.575645][T12250] Call Trace: [ 561.575651][T12250] [ 561.575658][T12250] dump_stack_lvl+0x16c/0x1f0 [ 561.575691][T12250] should_fail_ex+0x512/0x640 [ 561.575721][T12250] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 561.575745][T12250] should_failslab+0xc2/0x120 [ 561.575773][T12250] __kmalloc_cache_noprof+0x6a/0x3e0 [ 561.575794][T12250] ? alloc_fs_context+0x57/0x9c0 [ 561.575830][T12250] alloc_fs_context+0x57/0x9c0 [ 561.575860][T12250] mq_init_ns+0x172/0x620 [ 561.575887][T12250] copy_ipcs+0x383/0x610 [ 561.575914][T12250] ? copy_utsname+0xab/0x470 [ 561.575947][T12250] create_new_namespaces+0x20a/0xa90 [ 561.575972][T12250] ? security_capable+0x7e/0x260 [ 561.575997][T12250] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 561.576024][T12250] ksys_unshare+0x45b/0xa40 [ 561.576055][T12250] ? __pfx_ksys_unshare+0x10/0x10 [ 561.576084][T12250] ? ksys_write+0x1ac/0x250 [ 561.576118][T12250] __x64_sys_unshare+0x31/0x40 [ 561.576148][T12250] do_syscall_64+0xcd/0x490 [ 561.576180][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.576202][T12250] RIP: 0033:0x7f941a38ebe9 [ 561.576218][T12250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.576239][T12250] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 561.576259][T12250] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 561.576273][T12250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 561.576286][T12250] RBP: 00007f941b1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 561.576299][T12250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.576312][T12250] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 561.576339][T12250] [ 561.774223][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.845163][T12268] sg_write: data in/out 2359516/96 bytes for SCSI command 0x0-- guessing data in; [ 562.845163][T12268] program syz.4.1328 not setting count and/or reply_len properly [ 563.919915][T12299] FAULT_INJECTION: forcing a failure. [ 563.919915][T12299] name failslab, interval 1, probability 0, space 0, times 0 [ 563.970250][T12299] CPU: 0 UID: 0 PID: 12299 Comm: syz.2.1337 Not tainted syzkaller #0 PREEMPT(full) [ 563.970279][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.970293][T12299] Call Trace: [ 563.970299][T12299] [ 563.970307][T12299] dump_stack_lvl+0x16c/0x1f0 [ 563.970341][T12299] should_fail_ex+0x512/0x640 [ 563.970370][T12299] ? __kmalloc_node_noprof+0xc5/0x500 [ 563.970398][T12299] should_failslab+0xc2/0x120 [ 563.970425][T12299] __kmalloc_node_noprof+0xd8/0x500 [ 563.970449][T12299] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 563.970476][T12299] ? alloc_slab_obj_exts+0x41/0xa0 [ 563.970499][T12299] alloc_slab_obj_exts+0x41/0xa0 [ 563.970519][T12299] new_slab+0x27d/0x330 [ 563.970539][T12299] ___slab_alloc+0xcf2/0x1740 [ 563.970560][T12299] ? copy_ipcs+0x19f/0x610 [ 563.970598][T12299] ? copy_ipcs+0x19f/0x610 [ 563.970621][T12299] ? __slab_alloc.constprop.0+0x56/0xb0 [ 563.970643][T12299] __slab_alloc.constprop.0+0x56/0xb0 [ 563.970668][T12299] __kmalloc_cache_noprof+0xfb/0x3e0 [ 563.970691][T12299] ? copy_ipcs+0x19f/0x610 [ 563.970719][T12299] copy_ipcs+0x19f/0x610 [ 563.970741][T12299] ? copy_utsname+0xab/0x470 [ 563.970774][T12299] create_new_namespaces+0x20a/0xa90 [ 563.970817][T12299] ? security_capable+0x7e/0x260 [ 563.970843][T12299] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 563.970873][T12299] ksys_unshare+0x45b/0xa40 [ 563.970905][T12299] ? __pfx_ksys_unshare+0x10/0x10 [ 563.970950][T12299] ? ksys_write+0x1ac/0x250 [ 563.970984][T12299] __x64_sys_unshare+0x31/0x40 [ 563.971013][T12299] do_syscall_64+0xcd/0x490 [ 563.971045][T12299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.971067][T12299] RIP: 0033:0x7f3062f8ebe9 [ 563.971083][T12299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.971105][T12299] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 563.971125][T12299] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 563.971139][T12299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 563.971152][T12299] RBP: 00007f3063e20090 R08: 0000000000000000 R09: 0000000000000000 [ 563.971165][T12299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.971177][T12299] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 563.971204][T12299] [ 564.204758][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.643353][T12328] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 565.867392][T12328] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[12328] [ 566.242077][T12343] netlink: 'syz.4.1349': attribute type 11 has an invalid length. [ 566.268973][T12343] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1349'. [ 566.576528][T12351] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 567.676641][T12372] FAULT_INJECTION: forcing a failure. [ 567.676641][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 567.741908][T12372] CPU: 0 UID: 0 PID: 12372 Comm: syz.2.1357 Not tainted syzkaller #0 PREEMPT(full) [ 567.741941][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.741956][T12372] Call Trace: [ 567.741964][T12372] [ 567.741973][T12372] dump_stack_lvl+0x16c/0x1f0 [ 567.742010][T12372] should_fail_ex+0x512/0x640 [ 567.742046][T12372] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 567.742079][T12372] should_failslab+0xc2/0x120 [ 567.742112][T12372] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 567.742143][T12372] ? __d_alloc+0x32/0xae0 [ 567.742179][T12372] __d_alloc+0x32/0xae0 [ 567.742208][T12372] ? do_raw_spin_lock+0x12c/0x2b0 [ 567.742258][T12372] d_alloc+0x4a/0x1e0 [ 567.742291][T12372] d_alloc_name+0x83/0xb0 [ 567.742322][T12372] ? __pfx_d_alloc_name+0x10/0x10 [ 567.742352][T12372] ? __d_add+0x403/0xa50 [ 567.742402][T12372] simple_fill_super+0x2eb/0x720 [ 567.742431][T12372] ? __pfx_nfsd_fill_super+0x10/0x10 [ 567.742457][T12372] nfsd_fill_super+0x90/0x530 [ 567.742482][T12372] ? __pfx_set_anon_super_fc+0x10/0x10 [ 567.742505][T12372] ? __pfx_nfsd_fill_super+0x10/0x10 [ 567.742530][T12372] get_tree_keyed+0x10b/0x1d0 [ 567.742556][T12372] vfs_get_tree+0x8b/0x340 [ 567.742577][T12372] path_mount+0x1513/0x2000 [ 567.742612][T12372] ? __pfx_path_mount+0x10/0x10 [ 567.742642][T12372] ? kmem_cache_free+0x2d1/0x4d0 [ 567.742666][T12372] ? putname+0x154/0x1a0 [ 567.742700][T12372] ? putname+0x154/0x1a0 [ 567.742733][T12372] ? __x64_sys_mount+0x28d/0x310 [ 567.742761][T12372] __x64_sys_mount+0x28d/0x310 [ 567.742790][T12372] ? __pfx___x64_sys_mount+0x10/0x10 [ 567.742827][T12372] do_syscall_64+0xcd/0x490 [ 567.742861][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.742883][T12372] RIP: 0033:0x7f3062f8ebe9 [ 567.742899][T12372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.742920][T12372] RSP: 002b:00007f3063e20038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 567.742941][T12372] RAX: ffffffffffffffda RBX: 00007f30631c5fa0 RCX: 00007f3062f8ebe9 [ 567.742956][T12372] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 567.742969][T12372] RBP: 00007f3063011e19 R08: 0000000000000000 R09: 0000000000000000 [ 567.742983][T12372] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 567.742997][T12372] R13: 00007f30631c6038 R14: 00007f30631c5fa0 R15: 00007ffdb39e7d58 [ 567.743027][T12372] [ 568.109799][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.118413][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.489568][T12405] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 569.562047][T12408] FAULT_INJECTION: forcing a failure. [ 569.562047][T12408] name failslab, interval 1, probability 0, space 0, times 0 [ 569.578175][T12405] CIFS mount error: No usable UNC path provided in device string! [ 569.578175][T12405] [ 569.618249][T12405] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.644488][T12408] CPU: 0 UID: 0 PID: 12408 Comm: syz.5.1366 Not tainted syzkaller #0 PREEMPT(full) [ 569.644518][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.644531][T12408] Call Trace: [ 569.644539][T12408] [ 569.644548][T12408] dump_stack_lvl+0x16c/0x1f0 [ 569.644582][T12408] should_fail_ex+0x512/0x640 [ 569.644615][T12408] ? __kmalloc_noprof+0xbf/0x510 [ 569.644643][T12408] ? __list_lru_init+0xe8/0x4c0 [ 569.644666][T12408] should_failslab+0xc2/0x120 [ 569.644695][T12408] __kmalloc_noprof+0xd2/0x510 [ 569.644727][T12408] __list_lru_init+0xe8/0x4c0 [ 569.644754][T12408] alloc_super+0x8bf/0xbd0 [ 569.644783][T12408] sget_fc+0x116/0xc20 [ 569.644808][T12408] ? __pfx_set_anon_super_fc+0x10/0x10 [ 569.644832][T12408] ? __pfx_mqueue_fill_super+0x10/0x10 [ 569.644853][T12408] get_tree_nodev+0x28/0x190 [ 569.644883][T12408] mqueue_get_tree+0xf1/0x130 [ 569.644903][T12408] vfs_get_tree+0x8b/0x340 [ 569.644923][T12408] fc_mount_longterm+0x18/0x160 [ 569.644961][T12408] mq_init_ns+0x426/0x620 [ 569.644988][T12408] copy_ipcs+0x383/0x610 [ 569.645011][T12408] ? copy_utsname+0xab/0x470 [ 569.645045][T12408] create_new_namespaces+0x20a/0xa90 [ 569.645071][T12408] ? security_capable+0x7e/0x260 [ 569.645096][T12408] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 569.645125][T12408] ksys_unshare+0x45b/0xa40 [ 569.645155][T12408] ? __pfx_ksys_unshare+0x10/0x10 [ 569.645187][T12408] ? xfd_validate_state+0x61/0x180 [ 569.645228][T12408] __x64_sys_unshare+0x31/0x40 [ 569.645259][T12408] do_syscall_64+0xcd/0x490 [ 569.645292][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.645315][T12408] RIP: 0033:0x7fa079d8ebe9 [ 569.645351][T12408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.645373][T12408] RSP: 002b:00007fa07ab24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 569.645394][T12408] RAX: ffffffffffffffda RBX: 00007fa079fc6090 RCX: 00007fa079d8ebe9 [ 569.645408][T12408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 569.645422][T12408] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 569.645436][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.645460][T12408] R13: 00007fa079fc6128 R14: 00007fa079fc6090 R15: 00007ffc17473958 [ 569.645486][T12408] [ 570.023456][T12413] ubi0: attaching mtd0 [ 570.027635][T12413] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 570.139221][T12416] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 570.302503][ T9565] Bluetooth: hci4: command 0x0406 tx timeout [ 572.072854][T12453] FAULT_INJECTION: forcing a failure. [ 572.072854][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 572.144561][T12453] CPU: 0 UID: 0 PID: 12453 Comm: syz.5.1376 Not tainted syzkaller #0 PREEMPT(full) [ 572.144591][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.144605][T12453] Call Trace: [ 572.144612][T12453] [ 572.144620][T12453] dump_stack_lvl+0x16c/0x1f0 [ 572.144655][T12453] should_fail_ex+0x512/0x640 [ 572.144687][T12453] ? __kmalloc_noprof+0xbf/0x510 [ 572.144715][T12453] ? __list_lru_init+0xe8/0x4c0 [ 572.144738][T12453] should_failslab+0xc2/0x120 [ 572.144768][T12453] __kmalloc_noprof+0xd2/0x510 [ 572.144793][T12453] ? lockdep_init_map_type+0x5c/0x280 [ 572.144829][T12453] __list_lru_init+0xe8/0x4c0 [ 572.144856][T12453] alloc_super+0x904/0xbd0 [ 572.144892][T12453] sget_fc+0x116/0xc20 [ 572.144917][T12453] ? __pfx_set_anon_super_fc+0x10/0x10 [ 572.144941][T12453] ? __pfx_mqueue_fill_super+0x10/0x10 [ 572.144962][T12453] get_tree_nodev+0x28/0x190 [ 572.144989][T12453] mqueue_get_tree+0xf1/0x130 [ 572.145010][T12453] vfs_get_tree+0x8b/0x340 [ 572.145030][T12453] fc_mount_longterm+0x18/0x160 [ 572.145067][T12453] mq_init_ns+0x426/0x620 [ 572.145094][T12453] copy_ipcs+0x383/0x610 [ 572.145117][T12453] ? copy_utsname+0xab/0x470 [ 572.145150][T12453] create_new_namespaces+0x20a/0xa90 [ 572.145175][T12453] ? security_capable+0x7e/0x260 [ 572.145201][T12453] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 572.145229][T12453] ksys_unshare+0x45b/0xa40 [ 572.145261][T12453] ? __pfx_ksys_unshare+0x10/0x10 [ 572.145293][T12453] ? xfd_validate_state+0x61/0x180 [ 572.145334][T12453] __x64_sys_unshare+0x31/0x40 [ 572.145364][T12453] do_syscall_64+0xcd/0x490 [ 572.145398][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.145421][T12453] RIP: 0033:0x7fa079d8ebe9 [ 572.145438][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.145459][T12453] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.145480][T12453] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 572.145494][T12453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 572.145507][T12453] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 572.145521][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.145534][T12453] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 572.145562][T12453] [ 573.575429][T12485] FAULT_INJECTION: forcing a failure. [ 573.575429][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 573.642580][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.4.1386 Not tainted syzkaller #0 PREEMPT(full) [ 573.642609][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.642622][T12485] Call Trace: [ 573.642629][T12485] [ 573.642637][T12485] dump_stack_lvl+0x16c/0x1f0 [ 573.642692][T12485] should_fail_ex+0x512/0x640 [ 573.642730][T12485] ? __kmalloc_noprof+0xbf/0x510 [ 573.642759][T12485] ? __netlink_kernel_create+0x17f/0x750 [ 573.642791][T12485] should_failslab+0xc2/0x120 [ 573.642821][T12485] __kmalloc_noprof+0xd2/0x510 [ 573.642853][T12485] __netlink_kernel_create+0x17f/0x750 [ 573.642886][T12485] ? __pfx___netlink_kernel_create+0x10/0x10 [ 573.642946][T12485] uevent_net_init+0xf8/0x350 [ 573.642967][T12485] ? __pfx_uevent_net_init+0x10/0x10 [ 573.642989][T12485] ? __pfx_uevent_net_rcv+0x10/0x10 [ 573.643048][T12485] ? __pfx_uevent_net_init+0x10/0x10 [ 573.643066][T12485] ops_init+0x1e2/0x5f0 [ 573.643101][T12485] setup_net+0x10f/0x380 [ 573.643131][T12485] ? lockdep_init_map_type+0x5c/0x280 [ 573.643162][T12485] ? __pfx_setup_net+0x10/0x10 [ 573.643196][T12485] ? debug_mutex_init+0x37/0x70 [ 573.643220][T12485] copy_net_ns+0x2a6/0x5f0 [ 573.643258][T12485] create_new_namespaces+0x3ea/0xa90 [ 573.643290][T12485] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 573.643337][T12485] ksys_unshare+0x45b/0xa40 [ 573.643370][T12485] ? __pfx_ksys_unshare+0x10/0x10 [ 573.643404][T12485] ? xfd_validate_state+0x61/0x180 [ 573.643448][T12485] __x64_sys_unshare+0x31/0x40 [ 573.643481][T12485] do_syscall_64+0xcd/0x490 [ 573.643516][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.643539][T12485] RIP: 0033:0x7f80e798ebe9 [ 573.643557][T12485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.643580][T12485] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 573.643602][T12485] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 573.643617][T12485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 573.643632][T12485] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 573.643646][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.643660][T12485] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 573.643689][T12485] [ 574.055973][T12485] kobject_uevent: unable to create netlink socket! [ 574.177653][T12491] FAULT_INJECTION: forcing a failure. [ 574.177653][T12491] name failslab, interval 1, probability 0, space 0, times 0 [ 574.242963][T12491] CPU: 0 UID: 0 PID: 12491 Comm: syz.1.1396 Not tainted syzkaller #0 PREEMPT(full) [ 574.242993][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.243006][T12491] Call Trace: [ 574.243013][T12491] [ 574.243022][T12491] dump_stack_lvl+0x16c/0x1f0 [ 574.243056][T12491] should_fail_ex+0x512/0x640 [ 574.243087][T12491] ? __kmalloc_noprof+0xbf/0x510 [ 574.243115][T12491] ? __list_lru_init+0xe8/0x4c0 [ 574.243139][T12491] should_failslab+0xc2/0x120 [ 574.243168][T12491] __kmalloc_noprof+0xd2/0x510 [ 574.243193][T12491] ? lockdep_init_map_type+0x5c/0x280 [ 574.243229][T12491] __list_lru_init+0xe8/0x4c0 [ 574.243256][T12491] alloc_super+0x904/0xbd0 [ 574.243285][T12491] sget_fc+0x116/0xc20 [ 574.243310][T12491] ? __pfx_set_anon_super_fc+0x10/0x10 [ 574.243334][T12491] ? __pfx_mqueue_fill_super+0x10/0x10 [ 574.243355][T12491] get_tree_nodev+0x28/0x190 [ 574.243381][T12491] mqueue_get_tree+0xf1/0x130 [ 574.243402][T12491] vfs_get_tree+0x8b/0x340 [ 574.243422][T12491] fc_mount_longterm+0x18/0x160 [ 574.243458][T12491] mq_init_ns+0x426/0x620 [ 574.243486][T12491] copy_ipcs+0x383/0x610 [ 574.243509][T12491] ? copy_utsname+0xab/0x470 [ 574.243541][T12491] create_new_namespaces+0x20a/0xa90 [ 574.243586][T12491] ? security_capable+0x7e/0x260 [ 574.243614][T12491] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 574.243644][T12491] ksys_unshare+0x45b/0xa40 [ 574.243704][T12491] ? __pfx_ksys_unshare+0x10/0x10 [ 574.243746][T12491] ? xfd_validate_state+0x61/0x180 [ 574.243786][T12491] __x64_sys_unshare+0x31/0x40 [ 574.243815][T12491] do_syscall_64+0xcd/0x490 [ 574.243848][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.243870][T12491] RIP: 0033:0x7f941a38ebe9 [ 574.243886][T12491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.243907][T12491] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 574.243927][T12491] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 574.243941][T12491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 574.243954][T12491] RBP: 00007f941a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 574.243967][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.243979][T12491] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 574.244010][T12491] [ 577.532842][T12569] FAULT_INJECTION: forcing a failure. [ 577.532842][T12569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 577.588201][T12569] CPU: 0 UID: 0 PID: 12569 Comm: syz.5.1412 Not tainted syzkaller #0 PREEMPT(full) [ 577.588229][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.588242][T12569] Call Trace: [ 577.588249][T12569] [ 577.588257][T12569] dump_stack_lvl+0x16c/0x1f0 [ 577.588291][T12569] should_fail_ex+0x512/0x640 [ 577.588324][T12569] should_fail_alloc_page+0xe7/0x130 [ 577.588383][T12569] prepare_alloc_pages+0x3c2/0x610 [ 577.588425][T12569] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 577.588466][T12569] ? find_held_lock+0x2b/0x80 [ 577.588490][T12569] ? is_bpf_text_address+0x8a/0x1a0 [ 577.588521][T12569] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 577.588554][T12569] ? is_bpf_text_address+0x94/0x1a0 [ 577.588584][T12569] ? kernel_text_address+0x8d/0x100 [ 577.588609][T12569] ? arch_stack_walk+0xa6/0x100 [ 577.588636][T12569] ? __lock_acquire+0x62e/0x1ce0 [ 577.588666][T12569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 577.588702][T12569] ? policy_nodemask+0xea/0x4e0 [ 577.588735][T12569] alloc_pages_mpol+0x1fb/0x550 [ 577.588766][T12569] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 577.588804][T12569] alloc_pages_noprof+0x131/0x390 [ 577.588836][T12569] __pmd_alloc+0x3b/0x930 [ 577.588873][T12569] __handle_mm_fault+0xa06/0x2a50 [ 577.588900][T12569] ? mt_find+0x3ef/0xa30 [ 577.588934][T12569] ? __pfx___handle_mm_fault+0x10/0x10 [ 577.588955][T12569] ? __pfx_mt_find+0x10/0x10 [ 577.589004][T12569] ? find_vma+0xbf/0x140 [ 577.589033][T12569] ? __pfx_find_vma+0x10/0x10 [ 577.589065][T12569] handle_mm_fault+0x589/0xd10 [ 577.589090][T12569] ? __bpf_trace_exceptions+0x1/0x40 [ 577.589127][T12569] do_user_addr_fault+0x7a6/0x1370 [ 577.589165][T12569] ? rcu_is_watching+0x12/0xc0 [ 577.589191][T12569] exc_page_fault+0x5c/0xb0 [ 577.589221][T12569] asm_exc_page_fault+0x26/0x30 [ 577.589244][T12569] RIP: 0010:__put_user_8+0xd/0x20 [ 577.589275][T12569] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 577.589296][T12569] RSP: 0018:ffffc9000bc97ef0 EFLAGS: 00050246 [ 577.589314][T12569] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 577.589327][T12569] RDX: ffff8880338ebc00 RSI: ffffffff81adfa03 RDI: ffffffff8c162e00 [ 577.589342][T12569] RBP: 0000000000000000 R08: 3b8f596bbd88045d R09: 0000000000000001 [ 577.589356][T12569] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 577.589369][T12569] R13: 00007fa07ab459a0 R14: ffffffffffffffff R15: 0000000000000000 [ 577.589398][T12569] ? __x64_sys_get_robust_list+0x1d3/0x400 [ 577.589436][T12569] __x64_sys_get_robust_list+0x1e0/0x400 [ 577.589471][T12569] do_syscall_64+0xcd/0x490 [ 577.589520][T12569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.589543][T12569] RIP: 0033:0x7fa079d8ebe9 [ 577.589570][T12569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.589589][T12569] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 577.589607][T12569] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 577.589620][T12569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.589632][T12569] RBP: 00007fa07ab45090 R08: 0000000000000000 R09: 0000000000000000 [ 577.589644][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.589655][T12569] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 577.589681][T12569] [ 578.836291][T12593] can: request_module (can-proto-0) failed. [ 579.282937][T12599] netlink: zone id is out of range [ 579.308911][T12599] netlink: zone id is out of range [ 579.345584][T12599] netlink: zone id is out of range [ 579.374632][T12599] netlink: zone id is out of range [ 579.394691][T12599] netlink: zone id is out of range [ 579.423066][T12599] netlink: zone id is out of range [ 579.455703][T12599] netlink: zone id is out of range [ 579.481147][T12599] netlink: zone id is out of range [ 579.539575][T12599] netlink: zone id is out of range [ 579.580429][T12599] netlink: zone id is out of range [ 579.713573][T12621] FAULT_INJECTION: forcing a failure. [ 579.713573][T12621] name failslab, interval 1, probability 0, space 0, times 0 [ 579.801652][T12621] CPU: 0 UID: 0 PID: 12621 Comm: syz.4.1426 Not tainted syzkaller #0 PREEMPT(full) [ 579.801683][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.801696][T12621] Call Trace: [ 579.801704][T12621] [ 579.801712][T12621] dump_stack_lvl+0x16c/0x1f0 [ 579.801745][T12621] should_fail_ex+0x512/0x640 [ 579.801777][T12621] ? fs_reclaim_acquire+0xae/0x150 [ 579.801814][T12621] should_failslab+0xc2/0x120 [ 579.801844][T12621] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 579.801871][T12621] ? security_inode_alloc+0x3b/0x2b0 [ 579.801901][T12621] security_inode_alloc+0x3b/0x2b0 [ 579.801928][T12621] inode_init_always_gfp+0xce4/0x1030 [ 579.801957][T12621] alloc_inode+0x86/0x240 [ 579.801990][T12621] new_inode+0x22/0x1c0 [ 579.802045][T12621] simple_fill_super+0x306/0x720 [ 579.802076][T12621] ? __pfx_nfsd_fill_super+0x10/0x10 [ 579.802105][T12621] nfsd_fill_super+0x90/0x530 [ 579.802131][T12621] ? __pfx_set_anon_super_fc+0x10/0x10 [ 579.802156][T12621] ? __pfx_nfsd_fill_super+0x10/0x10 [ 579.802189][T12621] get_tree_keyed+0x10b/0x1d0 [ 579.802218][T12621] vfs_get_tree+0x8b/0x340 [ 579.802240][T12621] path_mount+0x1513/0x2000 [ 579.802275][T12621] ? __pfx_path_mount+0x10/0x10 [ 579.802308][T12621] ? kmem_cache_free+0x2d1/0x4d0 [ 579.802333][T12621] ? putname+0x154/0x1a0 [ 579.802370][T12621] ? putname+0x154/0x1a0 [ 579.802405][T12621] ? __x64_sys_mount+0x28d/0x310 [ 579.802434][T12621] __x64_sys_mount+0x28d/0x310 [ 579.802465][T12621] ? __pfx___x64_sys_mount+0x10/0x10 [ 579.802505][T12621] do_syscall_64+0xcd/0x490 [ 579.802541][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.802566][T12621] RIP: 0033:0x7f80e798ebe9 [ 579.802584][T12621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.802607][T12621] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 579.802628][T12621] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 579.802644][T12621] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 579.802658][T12621] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 579.802673][T12621] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 579.802687][T12621] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 579.802717][T12621] [ 582.084375][T12667] Invalid ELF header magic: != ELF [ 582.224598][T12683] FAULT_INJECTION: forcing a failure. [ 582.224598][T12683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.273436][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.1.1443 Not tainted syzkaller #0 PREEMPT(full) [ 582.273484][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.273498][T12683] Call Trace: [ 582.273505][T12683] [ 582.273514][T12683] dump_stack_lvl+0x16c/0x1f0 [ 582.273550][T12683] should_fail_ex+0x512/0x640 [ 582.273597][T12683] _copy_to_iter+0x29f/0x1710 [ 582.273624][T12683] ? __pfx__copy_to_iter+0x10/0x10 [ 582.273644][T12683] ? __pfx___mutex_lock+0x10/0x10 [ 582.273686][T12683] copy_page_to_iter+0x12a/0x1e0 [ 582.273710][T12683] anon_pipe_read+0x47e/0x1210 [ 582.273747][T12683] ? __pfx_anon_pipe_read+0x10/0x10 [ 582.273777][T12683] ? __pfx_autoremove_wake_function+0x10/0x10 [ 582.273805][T12683] ? __lock_acquire+0x62e/0x1ce0 [ 582.273840][T12683] do_iter_readv_writev+0x740/0x9e0 [ 582.273869][T12683] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 582.273897][T12683] ? bpf_lsm_file_permission+0x9/0x10 [ 582.273930][T12683] ? security_file_permission+0x71/0x210 [ 582.273967][T12683] ? rw_verify_area+0xcf/0x6c0 [ 582.273991][T12683] vfs_readv+0x4cb/0x8b0 [ 582.274020][T12683] ? __pfx_vfs_readv+0x10/0x10 [ 582.274062][T12683] ? __fget_files+0x20e/0x3c0 [ 582.274084][T12683] ? __fget_files+0x180/0x3c0 [ 582.274113][T12683] ? do_readv+0x28c/0x340 [ 582.274133][T12683] do_readv+0x28c/0x340 [ 582.274155][T12683] ? __pfx_do_readv+0x10/0x10 [ 582.274185][T12683] do_syscall_64+0xcd/0x490 [ 582.274218][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.274239][T12683] RIP: 0033:0x7f941a38ebe9 [ 582.274256][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.274277][T12683] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 582.274298][T12683] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 582.274312][T12683] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 582.274325][T12683] RBP: 00007f941b1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 582.274338][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.274350][T12683] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 582.274378][T12683] [ 582.691852][T12693] FAULT_INJECTION: forcing a failure. [ 582.691852][T12693] name failslab, interval 1, probability 0, space 0, times 0 [ 582.704693][T12693] CPU: 0 UID: 0 PID: 12693 Comm: syz.4.1447 Not tainted syzkaller #0 PREEMPT(full) [ 582.704721][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.704735][T12693] Call Trace: [ 582.704741][T12693] [ 582.704749][T12693] dump_stack_lvl+0x16c/0x1f0 [ 582.704784][T12693] should_fail_ex+0x512/0x640 [ 582.704815][T12693] ? fs_reclaim_acquire+0xae/0x150 [ 582.704853][T12693] should_failslab+0xc2/0x120 [ 582.704883][T12693] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 582.704911][T12693] ? security_inode_alloc+0x3b/0x2b0 [ 582.704940][T12693] security_inode_alloc+0x3b/0x2b0 [ 582.704967][T12693] inode_init_always_gfp+0xce4/0x1030 [ 582.705005][T12693] alloc_inode+0x86/0x240 [ 582.705038][T12693] new_inode+0x22/0x1c0 [ 582.705073][T12693] simple_fill_super+0x306/0x720 [ 582.705102][T12693] ? __pfx_nfsd_fill_super+0x10/0x10 [ 582.705129][T12693] nfsd_fill_super+0x90/0x530 [ 582.705153][T12693] ? __pfx_set_anon_super_fc+0x10/0x10 [ 582.705177][T12693] ? __pfx_nfsd_fill_super+0x10/0x10 [ 582.705202][T12693] get_tree_keyed+0x10b/0x1d0 [ 582.705228][T12693] vfs_get_tree+0x8b/0x340 [ 582.705248][T12693] path_mount+0x1513/0x2000 [ 582.705284][T12693] ? __pfx_path_mount+0x10/0x10 [ 582.705333][T12693] ? kmem_cache_free+0x2d1/0x4d0 [ 582.705359][T12693] ? putname+0x154/0x1a0 [ 582.705396][T12693] ? putname+0x154/0x1a0 [ 582.705431][T12693] ? __x64_sys_mount+0x28d/0x310 [ 582.705460][T12693] __x64_sys_mount+0x28d/0x310 [ 582.705510][T12693] ? __pfx___x64_sys_mount+0x10/0x10 [ 582.705551][T12693] do_syscall_64+0xcd/0x490 [ 582.705592][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.705618][T12693] RIP: 0033:0x7f80e798ebe9 [ 582.705636][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.705660][T12693] RSP: 002b:00007f80e8795038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 582.705683][T12693] RAX: ffffffffffffffda RBX: 00007f80e7bc5fa0 RCX: 00007f80e798ebe9 [ 582.705699][T12693] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 582.705714][T12693] RBP: 00007f80e7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 582.705729][T12693] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 582.705744][T12693] R13: 00007f80e7bc6038 R14: 00007f80e7bc5fa0 R15: 00007ffefc0a3d08 [ 582.705774][T12693] [ 584.876093][T12746] FAULT_INJECTION: forcing a failure. [ 584.876093][T12746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.944123][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.5.1464 Not tainted syzkaller #0 PREEMPT(full) [ 584.944153][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.944167][T12746] Call Trace: [ 584.944175][T12746] [ 584.944183][T12746] dump_stack_lvl+0x16c/0x1f0 [ 584.944219][T12746] should_fail_ex+0x512/0x640 [ 584.944256][T12746] _copy_to_user+0x32/0xd0 [ 584.944278][T12746] simple_read_from_buffer+0xcb/0x170 [ 584.944303][T12746] proc_fail_nth_read+0x197/0x240 [ 584.944327][T12746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.944353][T12746] ? rw_verify_area+0xcf/0x6c0 [ 584.944374][T12746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.944397][T12746] vfs_read+0x1e4/0xcf0 [ 584.944425][T12746] ? __pfx___mutex_lock+0x10/0x10 [ 584.944456][T12746] ? __pfx_vfs_read+0x10/0x10 [ 584.944488][T12746] ? __fget_files+0x20e/0x3c0 [ 584.944520][T12746] ksys_read+0x12a/0x250 [ 584.944544][T12746] ? __pfx_ksys_read+0x10/0x10 [ 584.944578][T12746] do_syscall_64+0xcd/0x490 [ 584.944610][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.944633][T12746] RIP: 0033:0x7fa079d8d5fc [ 584.944649][T12746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 584.944671][T12746] RSP: 002b:00007fa07ab45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.944692][T12746] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8d5fc [ 584.944708][T12746] RDX: 000000000000000f RSI: 00007fa07ab450a0 RDI: 0000000000000005 [ 584.944728][T12746] RBP: 00007fa07ab45090 R08: 0000000000000000 R09: 0000000000000000 [ 584.944742][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.944755][T12746] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 584.944784][T12746] [ 586.890777][T12795] FAULT_INJECTION: forcing a failure. [ 586.890777][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 586.963800][T12795] CPU: 0 UID: 0 PID: 12795 Comm: syz.1.1477 Not tainted syzkaller #0 PREEMPT(full) [ 586.963828][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.963840][T12795] Call Trace: [ 586.963847][T12795] [ 586.963854][T12795] dump_stack_lvl+0x16c/0x1f0 [ 586.963887][T12795] should_fail_ex+0x512/0x640 [ 586.963918][T12795] should_failslab+0xc2/0x120 [ 586.963944][T12795] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 586.963968][T12795] ? skb_clone+0x190/0x3f0 [ 586.963998][T12795] skb_clone+0x190/0x3f0 [ 586.964024][T12795] netlink_deliver_tap+0xabd/0xd30 [ 586.964056][T12795] netlink_unicast+0x64c/0x870 [ 586.964087][T12795] ? __pfx_netlink_unicast+0x10/0x10 [ 586.964112][T12795] ? __asan_memset+0x23/0x50 [ 586.964131][T12795] ? __build_skb_around+0x278/0x3b0 [ 586.964152][T12795] ? is_vmalloc_addr+0x86/0xa0 [ 586.964177][T12795] netlink_sendmsg+0x8d1/0xdd0 [ 586.964208][T12795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.964238][T12795] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 586.964264][T12795] ____sys_sendmsg+0xa98/0xc70 [ 586.964285][T12795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.964307][T12795] ? __pfx__kstrtoull+0x10/0x10 [ 586.964336][T12795] ___sys_sendmsg+0x134/0x1d0 [ 586.964363][T12795] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.964401][T12795] ? find_held_lock+0x2b/0x80 [ 586.964436][T12795] __sys_sendmmsg+0x200/0x420 [ 586.964465][T12795] ? __pfx___sys_sendmmsg+0x10/0x10 [ 586.964499][T12795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 586.964536][T12795] ? fput+0x9b/0xd0 [ 586.964563][T12795] ? ksys_write+0x1ac/0x250 [ 586.964585][T12795] ? __pfx_ksys_write+0x10/0x10 [ 586.964611][T12795] __x64_sys_sendmmsg+0x9c/0x100 [ 586.964637][T12795] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.964669][T12795] do_syscall_64+0xcd/0x490 [ 586.964699][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.964720][T12795] RIP: 0033:0x7f941a38ebe9 [ 586.964737][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.964757][T12795] RSP: 002b:00007f941b1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 586.964776][T12795] RAX: ffffffffffffffda RBX: 00007f941a5c5fa0 RCX: 00007f941a38ebe9 [ 586.964789][T12795] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 586.964802][T12795] RBP: 00007f941b1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 586.964814][T12795] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 586.964826][T12795] R13: 00007f941a5c6038 R14: 00007f941a5c5fa0 R15: 00007ffd74aba4b8 [ 586.964851][T12795] [ 587.756201][T12801] FAULT_INJECTION: forcing a failure. [ 587.756201][T12801] name failslab, interval 1, probability 0, space 0, times 0 [ 587.790038][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.5.1479 Not tainted syzkaller #0 PREEMPT(full) [ 587.790066][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.790078][T12801] Call Trace: [ 587.790085][T12801] [ 587.790093][T12801] dump_stack_lvl+0x16c/0x1f0 [ 587.790124][T12801] should_fail_ex+0x512/0x640 [ 587.790154][T12801] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 587.790179][T12801] should_failslab+0xc2/0x120 [ 587.790207][T12801] __kmalloc_cache_noprof+0x6a/0x3e0 [ 587.790228][T12801] ? alloc_super+0x52/0xbd0 [ 587.790255][T12801] alloc_super+0x52/0xbd0 [ 587.790275][T12801] ? sget_fc+0xd3/0xc20 [ 587.790302][T12801] sget_fc+0x116/0xc20 [ 587.790324][T12801] ? __pfx_set_anon_super_fc+0x10/0x10 [ 587.790347][T12801] ? __pfx_mqueue_fill_super+0x10/0x10 [ 587.790367][T12801] get_tree_nodev+0x28/0x190 [ 587.790392][T12801] mqueue_get_tree+0xf1/0x130 [ 587.790411][T12801] vfs_get_tree+0x8b/0x340 [ 587.790430][T12801] fc_mount_longterm+0x18/0x160 [ 587.790464][T12801] mq_init_ns+0x426/0x620 [ 587.790495][T12801] copy_ipcs+0x383/0x610 [ 587.790517][T12801] ? copy_utsname+0xab/0x470 [ 587.790550][T12801] create_new_namespaces+0x20a/0xa90 [ 587.790575][T12801] ? security_capable+0x7e/0x260 [ 587.790598][T12801] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 587.790625][T12801] ksys_unshare+0x45b/0xa40 [ 587.790654][T12801] ? __pfx_ksys_unshare+0x10/0x10 [ 587.790684][T12801] ? xfd_validate_state+0x61/0x180 [ 587.790723][T12801] __x64_sys_unshare+0x31/0x40 [ 587.790751][T12801] do_syscall_64+0xcd/0x490 [ 587.790787][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.790809][T12801] RIP: 0033:0x7fa079d8ebe9 [ 587.790825][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.790846][T12801] RSP: 002b:00007fa07ab45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 587.790865][T12801] RAX: ffffffffffffffda RBX: 00007fa079fc5fa0 RCX: 00007fa079d8ebe9 [ 587.790879][T12801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 587.790891][T12801] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 587.790904][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.790916][T12801] R13: 00007fa079fc6038 R14: 00007fa079fc5fa0 R15: 00007ffc17473958 [ 587.790941][T12801] [ 588.277208][T12808] ================================================================== [ 588.285292][T12808] BUG: KASAN: slab-use-after-free in msft_opcode_get+0x6d/0x80 [ 588.292972][T12808] Read of size 2 at addr ffff88807e64f232 by task syz.5.1480/12808 [ 588.300864][T12808] [ 588.303188][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.5.1480 Not tainted syzkaller #0 PREEMPT(full) [ 588.303216][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.303231][T12808] Call Trace: [ 588.303239][T12808] [ 588.303248][T12808] dump_stack_lvl+0x116/0x1f0 [ 588.303284][T12808] print_report+0xcd/0x630 [ 588.303314][T12808] ? __virt_addr_valid+0x81/0x610 [ 588.303344][T12808] ? __phys_addr+0xe8/0x180 [ 588.303373][T12808] ? msft_opcode_get+0x6d/0x80 [ 588.303403][T12808] kasan_report+0xe0/0x110 [ 588.303453][T12808] ? msft_opcode_get+0x6d/0x80 [ 588.303487][T12808] msft_opcode_get+0x6d/0x80 [ 588.303516][T12808] ? __pfx_msft_opcode_get+0x10/0x10 [ 588.303546][T12808] simple_attr_read+0x16b/0x370 [ 588.303568][T12808] ? __debugfs_file_get+0x1fe/0x840 [ 588.303604][T12808] ? __pfx_simple_attr_read+0x10/0x10 [ 588.303627][T12808] ? __debugfs_file_get+0x1fe/0x840 [ 588.303663][T12808] ? __pfx___debugfs_file_get+0x10/0x10 [ 588.303701][T12808] debugfs_attr_read+0x76/0xa0 [ 588.303739][T12808] full_proxy_read+0x12e/0x1a0 [ 588.303775][T12808] ? __pfx_full_proxy_read+0x10/0x10 [ 588.303813][T12808] vfs_read+0x1e4/0xcf0 [ 588.303841][T12808] ? __pfx___mutex_lock+0x10/0x10 [ 588.303875][T12808] ? __pfx_vfs_read+0x10/0x10 [ 588.303905][T12808] ? __fget_files+0x20e/0x3c0 [ 588.303934][T12808] ksys_read+0x12a/0x250 [ 588.303961][T12808] ? __pfx_ksys_read+0x10/0x10 [ 588.303991][T12808] do_syscall_64+0xcd/0x490 [ 588.304026][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.304051][T12808] RIP: 0033:0x7fa079d8ebe9 [ 588.304069][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.304093][T12808] RSP: 002b:00007fa07ab24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.304115][T12808] RAX: ffffffffffffffda RBX: 00007fa079fc6090 RCX: 00007fa079d8ebe9 [ 588.304131][T12808] RDX: 000000000000ffff RSI: 0000200000006740 RDI: 0000000000000005 [ 588.304146][T12808] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 588.304161][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.304175][T12808] R13: 00007fa079fc6128 R14: 00007fa079fc6090 R15: 00007ffc17473958 [ 588.304198][T12808] [ 588.304206][T12808] [ 588.528285][T12808] Allocated by task 8778: [ 588.532608][T12808] kasan_save_stack+0x33/0x60 [ 588.537290][T12808] kasan_save_track+0x14/0x30 [ 588.541964][T12808] __kasan_kmalloc+0xaa/0xb0 [ 588.546551][T12808] __kmalloc_noprof+0x223/0x510 [ 588.551426][T12808] ieee802_11_parse_elems_full+0x1db/0x3780 [ 588.557333][T12808] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 588.563436][T12808] ieee80211_iface_work+0xe2e/0x1360 [ 588.568721][T12808] cfg80211_wiphy_work+0x2c7/0x580 [ 588.573842][T12808] process_one_work+0x9cf/0x1b70 [ 588.578799][T12808] worker_thread+0x6c8/0xf10 [ 588.583391][T12808] kthread+0x3c5/0x780 [ 588.587488][T12808] ret_from_fork+0x5d7/0x6f0 [ 588.592091][T12808] ret_from_fork_asm+0x1a/0x30 [ 588.596861][T12808] [ 588.599184][T12808] Freed by task 8778: [ 588.603157][T12808] kasan_save_stack+0x33/0x60 [ 588.607837][T12808] kasan_save_track+0x14/0x30 [ 588.612518][T12808] kasan_save_free_info+0x3b/0x60 [ 588.617556][T12808] __kasan_slab_free+0x60/0x70 [ 588.622326][T12808] kfree+0x2b4/0x4d0 [ 588.626219][T12808] ieee80211_ibss_rx_queued_mgmt+0x1a92/0x2fd0 [ 588.632385][T12808] ieee80211_iface_work+0xe2e/0x1360 [ 588.637674][T12808] cfg80211_wiphy_work+0x2c7/0x580 [ 588.642788][T12808] process_one_work+0x9cf/0x1b70 [ 588.647734][T12808] worker_thread+0x6c8/0xf10 [ 588.652327][T12808] kthread+0x3c5/0x780 [ 588.656426][T12808] ret_from_fork+0x5d7/0x6f0 [ 588.661023][T12808] ret_from_fork_asm+0x1a/0x30 [ 588.665783][T12808] [ 588.668706][T12808] The buggy address belongs to the object at ffff88807e64f000 [ 588.668706][T12808] which belongs to the cache kmalloc-1k of size 1024 [ 588.682757][T12808] The buggy address is located 562 bytes inside of [ 588.682757][T12808] freed 1024-byte region [ffff88807e64f000, ffff88807e64f400) [ 588.696629][T12808] [ 588.698946][T12808] The buggy address belongs to the physical page: [ 588.705359][T12808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e648 [ 588.714131][T12808] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 588.722625][T12808] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 588.730597][T12808] page_type: f5(slab) [ 588.734572][T12808] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 588.743166][T12808] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 588.751749][T12808] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 588.760420][T12808] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 588.769103][T12808] head: 00fff00000000003 ffffea0001f99201 00000000ffffffff 00000000ffffffff [ 588.777773][T12808] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 588.786439][T12808] page dumped because: kasan: bad access detected [ 588.792858][T12808] page_owner tracks the page as allocated [ 588.798562][T12808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5222, tgid 5222 (S02klogd), ts 38013177424, free_ts 35437842320 [ 588.818980][T12808] post_alloc_hook+0x1c0/0x230 [ 588.823748][T12808] get_page_from_freelist+0x132b/0x38e0 [ 588.829290][T12808] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 588.835186][T12808] alloc_pages_mpol+0x1fb/0x550 [ 588.840039][T12808] new_slab+0x247/0x330 [ 588.844189][T12808] ___slab_alloc+0xcf2/0x1740 [ 588.848859][T12808] __slab_alloc.constprop.0+0x56/0xb0 [ 588.854238][T12808] __kmalloc_noprof+0x2f2/0x510 [ 588.859197][T12808] tomoyo_init_log+0x1385/0x2140 [ 588.864160][T12808] tomoyo_supervisor+0x302/0x13b0 [ 588.869185][T12808] tomoyo_env_perm+0x191/0x200 [ 588.873952][T12808] tomoyo_find_next_domain+0xec2/0x20b0 [ 588.879500][T12808] tomoyo_bprm_check_security+0x12e/0x1d0 [ 588.885224][T12808] security_bprm_check+0x1b9/0x1e0 [ 588.890331][T12808] bprm_execve+0x81a/0x1640 [ 588.894830][T12808] do_execveat_common.isra.0+0x4a5/0x610 [ 588.900476][T12808] page last free pid 1 tgid 1 stack trace: [ 588.906268][T12808] __free_frozen_pages+0x7d5/0x10f0 [ 588.911475][T12808] free_contig_range+0x183/0x4b0 [ 588.916461][T12808] destroy_args+0x794/0xc10 [ 588.920977][T12808] debug_vm_pgtable+0x1a32/0x3640 [ 588.926008][T12808] do_one_initcall+0x120/0x6e0 [ 588.930784][T12808] kernel_init_freeable+0x5c2/0x910 [ 588.935981][T12808] kernel_init+0x1c/0x2b0 [ 588.940302][T12808] ret_from_fork+0x5d7/0x6f0 [ 588.944904][T12808] ret_from_fork_asm+0x1a/0x30 [ 588.949666][T12808] [ 588.951988][T12808] Memory state around the buggy address: [ 588.957610][T12808] ffff88807e64f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.965687][T12808] ffff88807e64f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.973748][T12808] >ffff88807e64f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.981804][T12808] ^ [ 588.987427][T12808] ffff88807e64f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.995484][T12808] ffff88807e64f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 589.003544][T12808] ================================================================== [ 589.669731][T12808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 589.676985][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.5.1480 Not tainted syzkaller #0 PREEMPT(full) [ 589.686349][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.696403][T12808] Call Trace: [ 589.699675][T12808] [ 589.702612][T12808] dump_stack_lvl+0x3d/0x1f0 [ 589.707220][T12808] vpanic+0x6e8/0x7a0 [ 589.711236][T12808] ? __pfx_vpanic+0x10/0x10 [ 589.715788][T12808] ? __pfx_vprintk_emit+0x10/0x10 [ 589.720829][T12808] ? msft_opcode_get+0x6d/0x80 [ 589.725610][T12808] panic+0xca/0xd0 [ 589.729434][T12808] ? __pfx_panic+0x10/0x10 [ 589.733873][T12808] ? msft_opcode_get+0x6d/0x80 [ 589.738672][T12808] ? preempt_schedule_common+0x44/0xc0 [ 589.744149][T12808] ? preempt_schedule_thunk+0x16/0x30 [ 589.749542][T12808] check_panic_on_warn+0xab/0xb0 [ 589.754532][T12808] end_report+0x107/0x170 [ 589.758875][T12808] kasan_report+0xee/0x110 [ 589.763314][T12808] ? msft_opcode_get+0x6d/0x80 [ 589.768117][T12808] msft_opcode_get+0x6d/0x80 [ 589.772715][T12808] ? __pfx_msft_opcode_get+0x10/0x10 [ 589.778020][T12808] simple_attr_read+0x16b/0x370 [ 589.782882][T12808] ? __debugfs_file_get+0x1fe/0x840 [ 589.788098][T12808] ? __pfx_simple_attr_read+0x10/0x10 [ 589.793468][T12808] ? __debugfs_file_get+0x1fe/0x840 [ 589.798680][T12808] ? __pfx___debugfs_file_get+0x10/0x10 [ 589.804255][T12808] debugfs_attr_read+0x76/0xa0 [ 589.809045][T12808] full_proxy_read+0x12e/0x1a0 [ 589.813825][T12808] ? __pfx_full_proxy_read+0x10/0x10 [ 589.819122][T12808] vfs_read+0x1e4/0xcf0 [ 589.823295][T12808] ? __pfx___mutex_lock+0x10/0x10 [ 589.828337][T12808] ? __pfx_vfs_read+0x10/0x10 [ 589.833049][T12808] ? __fget_files+0x20e/0x3c0 [ 589.837723][T12808] ksys_read+0x12a/0x250 [ 589.841963][T12808] ? __pfx_ksys_read+0x10/0x10 [ 589.846729][T12808] do_syscall_64+0xcd/0x490 [ 589.851242][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.857131][T12808] RIP: 0033:0x7fa079d8ebe9 [ 589.861552][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.881153][T12808] RSP: 002b:00007fa07ab24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.889577][T12808] RAX: ffffffffffffffda RBX: 00007fa079fc6090 RCX: 00007fa079d8ebe9 [ 589.897545][T12808] RDX: 000000000000ffff RSI: 0000200000006740 RDI: 0000000000000005 [ 589.905508][T12808] RBP: 00007fa079e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 589.913468][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.921445][T12808] R13: 00007fa079fc6128 R14: 00007fa079fc6090 R15: 00007ffc17473958 [ 589.929422][T12808] [ 589.932493][T12808] Kernel Offset: disabled [ 589.936813][T12808] Rebooting in 86400 seconds..